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Hot Servers Not 
So Cool for Data 
Center Managers 


Vendors leap ahead with dense, fast systems, but 
cooling issues make some users reluctant to buy 





BY PATRICK THIBOCDEAU 
ATLANTA 
Low-end server technology is 
racing ahead of the ability of 
many data centers to keep the 
increasingly dense and fast 
systems cool, a problem that’s 
stopping some IT managers 
from using the new machines. 
Users may have to invest in 
new cooling, monitoring 


and power equipment, i 


or even retrofit their 
data centers or build 
new ones, to accommo- 
date the servers. 

Data center managers 


ILM Projects 
Go Forward, 
But Slowly 


IT execs face internal, 
technical challenges 


BY LUCAS MEARIAN 

LONG BEACH, CALIF 

IT managers at a conference 
here last week said they face 
daunting tasks in trying to im- 





who gathered here last week 
for an AFCOM conference 
said server and processor ven- 
dors need to shift from build- 
ing denser systems to making 
ones that use less power. They 
also need to set up develop- 
ment partnerships with ven- 


| dors of cooling and power 


products, conference atten- 
dees said. 

The server makers 
have “set their sights on 
making things faster 
and smaller, and that’s 
all well and nice, but 

Hot Servers, page 49 


| plement information life-cycle 


management approaches, in- 
cluding classifying data based 
on its business value so it can 
be stored on different types of 
devices. 

Another big challenge is 
changing the attitudes of busi- 
ness units that are used to get- 
ting premium storage for 
every byte of data, according 
to about 10 attendees at the in- 
augural ILM Solutions Confer- 
ence, which was sponsored by 

ILM Projects, page 16 
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Mike Scardina, chief financial officer of IT at Allstate Insurance, 
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JBoss App Server Gets J2EE 
Conga: Draws Interest 


Users start to explore 
open-source offerings, 
but concerns remain 
BY CAROL SLIWA 
IBM and BEA Systems Inc. 
hold the lead in the applica- 
tion server software market, 
but the recent release of the 
first J2EE-compliant open- 
source offering from JBoss 
Inc. could spark more corpo- 
rate users to check out new 
options. 

A half-dozen users of lead- 
ing commercial offerings told 
Computerworld that they’re 


| beginning to explore open- 





source alternatives and that 


| Java 2 Enterprise Edition com- | 
| division currently uses BEA’s 


pliance is important to them 


| But how soon or how serious- 


ly open-source application 
servers might challenge the 
market leaders is unclear. 
“We will eventually imple- 
ment open-source servers to 
help minimize costs, but our 
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strategy is to deploy low-risk 
apps to them,” said Gus Tep- 


| per, vice president of software 


development in the interac- 


| tive division at First American 
| Title Insurance Co. in Santa 


Ana, Calif. 
First American’s interactive 


WebLogic application server. 


| The unit is considering open- 
| source options for “well- 
| established, nonchanging ap- 


plications,” according to Tep- 


| per. But that will happen only 


after “very long and rigorous 
test cycles,” he added. 
“Common sense tells us the 
future of reliability and scala- 
bility comes from clusters of 
commodity-based hardware 
JBoss, page 14 





Can you afford to change? 


The time has come, they say, to transform your IT. But how? 
On what scale? As a technology company, HP creates—as 
no financial institution can—opportunities you once thought 
impossible, and lets you change without fear. HP consultants 
help you identify the hardware, software and services you'll 
need. Then HP Financial Services helps you finance global 
migration and manage the technology over its lifespan, while 
minimizing financial risks. Once you can afford change, you 


might even embrace it. www.hp.com/info/hpfs 
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On-Demand Collaboration. Only from Polycom. 


Needs tobe 
Secure and 
standards- 


In this real-time world, instant access to colleagues around the globe has become a business mandate. Only Polycom can bring 
people together via any combination of video, voice, data and Web collaboration — on-demand. Without complex IT intervention 
or advance reservations. A single dial-in number or buddy list securely connects any number of participants, over any network, 
any protocol, any speed or any collaboration device. And, you can do it all with confidence since Polycom has the most widely 
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Grazing the Nanograss 


In the Technology section: A marriage 

of materials science and electronics, 
nanograss may cool computers, improve 
batteries and put a zoom lens in your cell 
phone. At left, a drop of water glides across 
a nanograss surface. Page 30 
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Extending Identity 


Also in the Technology section: Federated 
identity management technologies promise 
cost savings and improved access to networks, 
but companies have been slow to adopt them 
because they have concerns about trust and 
interoperability. Page 25 
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Siebel’s new CRM strategy 
includes less monolithic ap- 
plications and more coordi- 
nated services offerings. 


Layoffs begin for some TXU 
Corp. IT workers whose 

jobs were outsourced to a 
Capgemini subsidiary in July. 


CA buys Netegrity to boost its 
presence in the IT security 
market. But analysts see a sig- 
nificant overlap between the 
two companies’ products. 


IBM’s app server upgrade is 
designed to cut application 
downtime by shifting work- 
loads if a system crashes. 


The Navy and EDS revamp 
the $8.8 billion Navy/Marine 
Corps Intranet contract to in- 
clude clearer metrics for mea- 
suring EDS’s performance. 


Companies launch counter- 
attacks against phishing 
scams to stop customer con- 
fidence from waning. 


Attachmate adds new tools 
to help software developers 
more easily tap into main- 
frame data when building 
Web-based applications. 


SAP expands the new Java and 
business intelligence capabili- 
ties built into its NetWeaver 
middleware and application 
integration suite. 


The DHS isn’t doing enough 
to integrate information 
stored in a dozen terrorist 
watch-list databases, accord- 
ing to a new report. 


: 28 Express Delivery. Application 


delivery appliances combine 
several technologies to ensure 
fast, secure and reliable access 
to Web-enabled applications. 


32 Security Manager’s Journal: 


Security Review Uncovers 
Rampant Virus Infections. 
Our new journal writer, “C.J. 
Kelly,” discovers that the only 
thing worse than having a net- 
work infected by viruses is 
having them discovered by an 
outside security assessment 
team during an audit. 


MANAGEMENT 





37 The Number Crunchers. Un- 


relenting cost pressures have 
pushed so-called CFOs of IT 
into the spotlight. But they 
face huge challenges as they 
try to integrate intangibles 
into rigid corporate account- 
ing systems. 


: 40 Q&A: Senate CIO. J. Greg 

: Hanson’s agenda ranges from 
e-mail to inaugurations — all 
in the national limelight. And 
talk about tough customers. 


: 42 Career Watch. Making career 


changes and dealing with 
problem employees; top busi- 
ness schools for IT; the mor- 
phing CIO; and small compa- 
nies take the lead in IT hiring. 


8 


On the Mark: Mark Hall de- 
scribes how eBay is trying to 
simplify the integration of 
companies’ supply chain ap- 
plications into its Web site. 


20 Don Tennant suspects that the 


intolerant mentality of Linux 
enthusiasts is hindering the 
OS’s adoption by perpetuating 
the myth of its immaturity. 


20 Thornton A. May thinks CFOs 


of IT will play a big role in the 
future, and the data that he 
has collected shows why. 


Pimm Fox bemoans how poli- 
tics and bureaucracy are tying 
up funds to support high- 
speed Internet and phone ser- 
vice in libraries and schools. 


34 Curt A. Monash claims that 


John Kerry has the edge over 
George W. Bush in issues that 
affect IT professionals. 


43 Bart Perkins says ongoing in- 


frastructure and support costs 
for new developments can 
throw your hard-won budget 
out of whack. Plan carefully to 
avoid nasty surprises. 


50 Frankly Speaking: Frank 


Hayes, sitting uncomfortably 
close to Mount St. Helens, 
knows just how PeopleSoft 
customers feel. 
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The Testing Time Bomb 
DEVELOPMENT: Sure, you test the functional- 
ity of new code that you add to your soft- 
ware, but you'd also better make sure that 
the old stuff still works right, says columnist 
Linda Hayes. @ QuickLink 49847 


Candidates Miss 

Concerns 
OPINION: Columnist Jay Cline says George W. 
Bush or John Kerry could pick up the support 
of independent-minded voters by voicing 
clear support for upholding privacy rights 
during the fight against terrorism. 


© QuickLink 49851 
Take Advantage of Longhorn’s Lag 


OPERATING SYSTEMS: Two Avanade consul- 
tants outline how the delay in Microsoft’s 
next operating system offers you some time 
to prepare — in part by turning to often- 
underused features in existing versions of 
Windows. @ QuickLink 49750 


How to Evaluate a Security Threat 
SECURITY: Mark Stevens of WatchGuard 
Technologies offers a checklist of nine ques- 
tions to ask when gauging the seriousness of 
anew threat. @ QuickLink 49123 


Hands On: Storage Revamp 
STORAGE: A senior systems administrator 
praises and pans various backup products. 


© QuickLink 49862 
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DEPARTMENTS 


Breaking News 

@ QuickLink 21510 
Newsletter 
Subscriptions 

© QuickLink a1430 
Knowledge Centers 
A QuickLink 22570 
The Online Store 
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What's a QuickLink? 
Throughout each issue of 
Computerworld, you'll 

see five-digit QuickLink codes 

pointing to related content on 
our Web site. Also, at the end of 
each story, a QuickLink to that 
story online facilitates sharing it 
with colleagues. Just enter any 
of those codes into the Quick- 

Link box, which is at the top of 

every page on our site. 
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AT DEADLINE 


Novell Postpones 
OES Release Plan 


Novell inc. said its Open Enter- 
prise Server software will ship in 
February, two months later than 
the December release date it set 
last spring [QuickLink 45763]. 
OES will run on top of both the 
NetWare and Linux kernels, and 
Novell said it decided to wait for a 
service pack for its SUSE Linux 
Enterprise Server 9 operating 
system that’s due in January. 


Sun, Kodak Agree 
To Settle Lawsuit 


Sun Microsystems Inc. said it has 
agreed to pay $92 million to settle 
a patent infringement lawsuit filed 
by Eastman Kodak Co. in 2002. 


The settlement was announced six 


days after a federal jury in New 
York ruled that Sun’s Java pro- 
gramming language infringed on 
three Kodak patents related to the 
use of object technologies. Sun 
has licensed the patents for use 
with all its Java-based products. 


Microsoft Probes 
Flaw in ASP.Net 


Microsoft Corp. said it’s investi- 
gating a reported vulnerability in 
its ASP.Net software that could al- 
low an attacker to bypass security 
features on a Web server and view 
sensitive content. It also provided 
instructions for mitigating the ef- 
fects of the vulnerability. ASP.Net 
is the latest version of Microsoft's 
Active Server Pages technology. 


Dell Recalls 990k 
Notebook Adapters 


Dell Inc. is recalling about 
990,000 electrical adapters that 
were sold from 1998 to 2002 for 
use with its notebook PCs. The 
recall followed seven reports of 
overheating problems with the 


adapters, which were made in Chi- | 


na by Taipei, Taiwan-based Delta 
Electronics Inc. The adapters pose 
a risk of fire or electrical shock. 
Dell said, adding that it will pro- 
vide free replacements. 





| direction includes 
| adding a compre- 
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For Siebel, New Strategy 


Changes approach 
on development, 
technical services 


| BY MARC L. SONGINI 


LOS ANGELES 
O SOME USERS of 
Siebel Systems Inc.’s 
customer relation- 
ship management 


| software, a “Chapter 2” strate- 
gy that the company unveiled 
| here last week in an attempt to 


revitalize its sagging fortunes 


| is no big deal. But others said 
| they were buoyed by 
| the new approach 

that Siebel outlined. 


At the Siebel User 
Week conference 
here, executives 


| from the CRM ven- 


dor said the new 


hensive set of ana- 
lytical applications, 
breaking its technol- 
ogy into components, provid- 
ing users with more guidance 
on deployments and better 


| aligning the company’s ser- 


vices units. Siebel said it ulti- 


| mately wants to move beyond 


being seen as just a technolo- 


| gy vendor and become more 


of a partner to its users. 
“The first generation of 


CRM was about a product,” 
| Siebel CEO J. Michael Lawrie 


said. “It was about the tech- 





NEW CEO 
Aha ame wii 
says “Chapter 2 
ellen a7 ae 


nology. And the second gener- | 


ation, Chapter 2, is about val- 
ue.” He added that the compa- 


| ny’s new strategy is built 
| around the concept of “help- 


ing the customer get closer 


| with their customer,” instead 
| of focusing on CRM as a tech- 
| nology. 


A Step Forward 


Siebel’s sales have declined 
sharply over the past few 
years, partly as a result of 
stiffer competition from high- 
end rivals such as SAP AG and 
smaller vendors such as Sales- 


| force.com Inc. But for several 





users who were interviewed at 


| last week’s conference, the 


changes made by Lawrie since 
he took over the reins from 
co-founder Thomas Siebel in 
May [QuickLink 46697] are a 


| big step forward. 


“There is a clarity of vision 
and strategy there now that 
was not present before,” said 
Richard Napier, business de- 
velopment manager at InFact 


| Group, a software consulting 


firm and systems integrator 


| in Plano, Texas. InFact uses 


Siebel’s hosted CRM On- 
Demand service to 
support its internal 
operations and does 
Siebel-related con- 
sulting 

Napier said that 
Siebel’s global ser- 
vices organization 
has offered more 
than 100 types of ed- 
ucational or consult- 
ing services, and no 
one at the software 
vendor appeared to be track- 
ing which particular services 
were being proposed to which 
customers. Now Siebel seems 


Siebel Expands Its Busin 


LOS ANGELES 


In addition to its other Chapter 2 
initiatives, Siebel is rolling out a 
more extensive set of business 
intelligence offerings. 

At a Business Intelligence 
Summit that was held concur- 
rently with Siebel User Week, 
the software vendor announced 
the release of 20 analytical ap- 
plications. The offerings include 
a tool that will deliver industry- 
specific customer analysis func- 
tions spanning call center, sales 
and marketing operations. Also 
being added is financial analysis 
software for optimizing the use 
of corporate assets, a tool to 
help evaluate suppliers and 
another product for measuring 


employee performance. 





Is Next Chapter in CRM 


Ohi late Mme cette 
set of CRM applications to 
Weer MUM CMLL oleh MUL Miele 
digestible pieces. 
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so users can more easily iden- 
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* Work with partners to 
write custom software for 
RUM tt 
business requirements. 


to be getting more of a grip on 
“how a software house should 
deliver services,” he said. 

“T still don’t think they’ll be 
100% there, but they’re on the 
right track,” said Roger Mor- 
rell, vice president of IT at 
Infonet Services Corp., an El 
Segundo, Calif.-based network 
services firm that runs Siebel 
7.5 to support its order entry 


eee 
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Siebel said the business intel- 
ligence applications will use data 
integration technology from In- 


> formatica Corp. to pull in data 
: from multiple systems and deliv- 
: eritin real time to end users. 


Larry Barbetta, general man- 


ager of Siebel analytics, said the 


new software will let IT man- 


: agers “democratically” distribute 
: information throughout their 

: companies. For example, call 

: center workers might not need 

= to run complex reports but could 
: use the business intelligence 

> tools to quickly see whether a 

: caller is a valued customer and 

: then treat him accordingly. 


The customer analysis soft- 


: ware sounds “cool,” said Debra 
: Domeyer, chief technology offi- 





www.computerworld.com 


and management processes. 
“T’m more comfortable [with 
Siebel’s direction] than I was a 
year ago,” Morrell added. 

To users at Pitney Bowes 
Inc., though, Chapter 2 isn’t so 
new. “This is more evolution- 
ary than revolutionary,” said 
Mark Davis, vice president of 
customer service at Pitney 
Bowes. The Stamford, Conn.- 
based maker of mailing and 
document management sys- 
tems runs Siebel’s customer 
service, call center and sales 
force automation software. 

Kathleen Banashak, director 
of customer service opera- 
tions at Pitney Bowes, added 
that Siebel had already proved 
itself a worthwhile partner 
and developed a strong rela- 
tionship with people inside 
Pitney Bowes before the com- 
pany even decided to buy the 
applications. 

But Ian Jacobs, an analyst at 
Current Analysis Inc. in Ster- 
ling, Va., said the plans out- 
lined by Siebel are a definite 
change in direction. Jacobs 
said the company essentially 
issued a mea culpa, acknowl- 
edging that for many users, 
its portfolio of applications is 
either “too complicated to im- 
plement, too complicated to 
use or too far beyond what 
their actual needs are.” 


@ 49956 


ess Intelligence Apps 


: cer at CarsDirect.com Inc., an 

: online automobile retailer in 

: Sherman Oaks, Calif., that uses 
: Siebel's call center and sales 

: applications. 


The analysis tool could make 


: it easier to deliver real-time infor- 
: mation to vehicle makers about 

: the configurations that shoppers 
> are seeking when they order cars 
: online, Domeyer said, adding 

: that such a capability could help 
: the manufacturers improve their 
: inventory management process- 
> es. She said the software could 

: also make it possible for Cars- 

: Direct.com staffers to rapidly an- 
> alyze the results of sales promo- 
: tions and assess variables such 
> as regional factors. 


~ Marc L. Songini 





www.computerworld.com 


NEWS 


COMPUTERWORLD October 11, 2004 7 





Outsourcing Vendor Starts to 
Cut IT Workers at Texas Utility 


Capgemini plans 
layoffs, shift of 50 
apps jobs to India _ 


BY THOMAS HOFFMAN 
Capgemini Energy LP, which 
was formed in July to manage 
IT and back-office operations 
for energy conglomerate TXU 
Corp., this month plans to 
start dismissing about 230 for- 
mer TXU workers, including 
50 to 75 technology staffers. 

The cuts follow the Oct. 1 
expiration of a three-month 
job security guarantee for the 
TXU employees and include 
a mix of layoffs and offshore 
moves. For example, Capgemi- 
ni Energy CEO Bob Pryor said 
last week that about 50 appli- 
cation development and main- 
tenance positions are being 
shifted to a facility in Banga- 
lore, India, that’s owned by 
parent company Capgemini. 

Pryor added that Dallas- 
based Capgemini Energy plans 
a second wave of downsizing 
at TXU in February. Although 
Pryor declined to say how 
many positions might be af- 
fected at that time, he said 
some IT infrastructure jobs 
will eventually be transferred 
to Bangalore and to a facility 
in Krakow, Poland. 


Slashing Costs 
The layoffs and offshore trans- 
fers are part of Capgemini En- 
ergy’s cost-savings strategy for | 
TXU, which is also based in 
Dallas. Pryor said that before 
TXU turned to the outsourc- 
ing vendor to provide IT, call 
center and business services, it 
was spending more than $1 bil- 
lion a year on sales, general 
and administrative functions. 
“There’s a recognition that 
their costs were just too high,” 
Pryor said. The operations 
that were outsourced account 
for $500 million of TXU’s 
SG&A expenses, he added. 
On Sept. 1, Capgemini Energy 
submitted a plan to TXU 





spelling out steps it would 


take to reduce the costs by 
30% over the next 16 months 
while improving IT and busi- 
ness-process service levels. 

As part of the outsourcing 
agreement, Capgemini Energy 
supports the bulk of TXU’s IT 
operations, including its IT in- 
frastructure and its desktop 
computing, application devel- 


| opment and software mainte- 
nance activities. 


Pryor said that of the 2,700 
TXU employees who trans- 
ferred to Capgemini Energy 
as part of the 10-year, $3.5 bil- 
lion outsourcing agreement, 
roughly 800 work in IT-related 


CA Buys Netegrity 


positions. The first round of 


| layoffs, which Capgemini ex- 
; pects to complete early next 
| month, could reduce the IT 





workforce by as much as 9%. 
Rick Nicholson, an analyst 
at Meta Group Inc., noted that 
the TXU/Capgemini contract 
is complex and was pulled to- 
gether in a relatively short pe- 


| riod of time — in only about 


60 days, from what he was 
told. “I bet there are a number 


| of issues that will pop up in 
| the first year of the deal that 
| they’ll have to work through,” 


he said. 
Nicholson also questioned 


to 


Expand in IT Security 


Product overlap 
issues could affect 


users, analysts say | 


| CA’s eTrust access manage- 


BY JAIKUMAR VIJAYAN 
Computer Associates Interna- 
tional Inc. last week said it 
plans to buy Netegrity Inc. in 
an effort to boost its share of 


| the market for identity and ac- 


cess management software. 


| But the deal may result in 


short-term uncertainty for 
users because of what analysts 
described as a significant 
overlap between the tools sold 


| by CA and Netegrity. 


CA said it has agreed to pay 
$430 million in cash to acquire 
Waltham, Mass.-based Net- 
egrity, which offers Web ac- 
cess control and end-user au- 
thorization software. The ad- 


| dition of Netegrity will help 


CA expand its eTrust portfolio 
of IT security products, said 
interim CEO Kenneth Cron 
during a press conference. 


But users and analysts react- | 


ed more cautiously. 

A “rather complete overlap” 
in products could mean major 
problems for users, said Jon- 


| athan Penn, an analyst at For- 


rester Research Inc. For in- 


| stance, Netegrity’s SiteMinder 


software is a direct rival to 


| ment suite, Penn said. Similar- 


ly, the application provision- 


| ing technology that Netegrity 
| acquired as part of its pur- 


chase of Business Layers Inc. 
last December overlaps with 


| CA’s provisioning software, 





according to Penn. 
“I think there is going to be 


| alot of near-term confusion as 


to the future of some of these 
Py ve ee. 


What Netegrity brings to 
the table-for CA: 
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trol, authorization and applica- 

tion provisioning tools. 


About 850 customers, in- 
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Revenue of $78.4 million in 
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TXU’s former IT workers and 
ete wee eMule) ste Tr) 
PRS Memmi 4alil*] 
in February, said Capgemini. 


whether the plan to transfer 
jobs that support the regulated 


| side of TXU’s business out of 


state could be challenged by 


| the Public Utility Commission 


of Texas or by state legislators. 
But Terry Hadley, a spokes- 


products,” he said. 

Giuseppe Cimmino, direc- 
tor of corporate technology at 
Discovery Communications 
Inc. in New York, said it’s still 
too early to say how the acqui- 


sition will affect him and oth- 
er users. His company, which 
| owns the Discovery Channel 
| and other cable TV program- 


ming outlets, uses SiteMinder 
and the eProvisioning soft- 
ware that Netegrity inherited 
from Business Layers. 

“Our main concerns will be 
which products survive and 


| whether there are any impacts 


to Netegrity’s execution of the 
continued integration and en- 
hancement of the eProvision- 
ing product,” Cimmino said. 

A user at a large financial 
services firm expressed con- 


‘ | cern that Islandia, N-Y.-based 


CA's purchase of Netegrity 
could result in higher prices 
for products such as the Iden- 
tityMinder software that his 
company uses. 
“Unfortunately, my opinion 
is that this is a very bad move 
for a pretty decent product,” 


said the user, who asked not to | 
| cess control and directory 
| management, Weiss said. “I 


be identified. He added that 
CA “consistently overcharges” 
for its software and said he 
also expects technical support 
costs to “rise dramatically” 
from what Netegrity currently 
charges. 


man for the Austin-based utili- 


| ty commission, said there are 


no existing laws that would 
prevent Capgemini Energy or 
TXU from moving any jobs 


| out of the state. 


Trey Trainor, chief of staff 
for State Rep. Phil King, the 


| chairman of the Texas Legisla- 
| ture’s committee on regulated 


industries, said that the panel 
doesn’t have any hearings 


| scheduled and that the legisla- 
| ture isn’t scheduled to meet 


again until January. 
Capgemini Energy is negoti- 


| ating with several other com- 


panies and hopes to sign at 


least one more contract by 


next spring, Pryor said. The 

| firm is “waiting to see how 

| adding other clients affects 

| us” on staffing before finaliz- 

| ing plans for the next round of 
cuts at TXU, he said. @ 49958 


It can take years for CA to 


| fully integrate acquired soft- 

| ware into its tightly bundled 

| product suites, said Jon Oltsik, 
| an analyst at Enterprise Strate- 
| gy Group Inc. in Milford, 

| Mass. For instance, five years 

| after CA bought Platinum 


Technology Inc., integration 


| of the two companies’ prod- 
| ucts remains “a work in 
| progress,” Oltsik said. “I 


expect the same between 
Netegrity and eTrust, so 
we're likely to see nothing 
but slideware for a while.” 
Toby Weiss, senior vice 


| president of eTrust product 


management at CA, said the 


| company will release a prod- 

| uct integration road map after 
| the acquisition is completed, 

| which is expected by year’s 

| end. In response to the con- 

| cerns about overlapping prod- 


ucts, Weiss insisted that there 
| are only superficial similari- 
| ties between Netegrity’s soft- 


| ware and CA's tools. 


Netegrity’s strategic focus 


on Web services security tech- 


nology complements CA’s 
strengths in client/server ac- 


think this merger ultimately 
gives users the deepest and 


| broadest set of identity man- 


agement products,” he added. 


| @ 49959 
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SunGard to Undo 
Merger Via Spin-off 


SunGard Data Systems Inc. said it 
will split into two companies early 
next year by spinning off its disas- 
ter recovery unit. The move will 
undo the 1983 merger that creat- 
ed SunGard, although the Wayne, 
Pa.-based company said the dis- 
aster recovery unit and its finan- 
cial services software division 
have operated independently of 
each other all along. No layoffs 
are planned, SunGard added. 


Former Peregrine 
Execs Face Charges 


A federal grand jury in San Diego 
indicted eight former executives 
of Peregrine Systems Inc. on 
charges of conspiracy to commit 
securities fraud. The charges cov- 
er a period from March 1999 
through May 2002. John Mutch, 
who took over as Peregrine’s 
CEO last year, said the San Diego- 
based software vendor “fully 
cooperated with the government 
in its investigations and will con- 
tinue to do so.” 


Sun Details Plans 
For Faster CPU 


Sun Microsystems Inc. introduced 
a new UltraSparc IV processor 
designed to double application 
performance, with features such 
as multithreading and expanded 
caches and buffers. The Ultra- 
Sparc [V+ will also have a higher 
clock speed than Sun’s existing 
chips, and plans call for it to 
reach 2 GHz one day. Shipments 
are due to start in mid-2005. 


Short Takes 


The fiscal 2005 cap on H-1B 
VISAS for foreign workers was 
reached on Oct. 1, the day the fed- 
eral fiscal year began. The cap 
was reached even faster than had 
been expected [QuickLink 
49794]. ... ADVANCED MICRO 
DEVICES INC. reported that its 
third-quarter revenue was below 
plan, but it said that microproces- 
sor sales remained strong. 
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EBay, PayPal in... 


. » . your supply chain pocket. Enterprises like Dell Inc., IBM 
and the state of Oregon already use eBay Inc. and its 
PayPal Inc. online payments division to profitably 
move unwanted capital goods that are gathering dust 
on their shelves into the hands of people who can 


actually use them. But eBay, 
which gets a small cut from 
each transaction processed 
on its site, sees a huge growth 
opportunity if it can make it 
even easier for companies to 
leverage its global buying 
community within their sup- 
ply chains. Not a bad idea, 
since the online auc- 
tion site handled more 
than $12 billion worth 
of transactions last 
year. So San Jose- 
based eBay is bulking 
up its Web services 
offerings in an at- 
tempt to entice third- 
party and corporate 
developers to more tightly in- 
tegrate its online auction and 
payment technologies into 
packaged and custom appli- 
cations. Matt Ackley, senior 
director of strategic partner- 
ships at eBay, points to the 
company’s development of 
another way to expose its ap- 
plication programming inter- 
faces, through a Web service 
called Representational State 
Transfer, or Rest. The tech- 
nology is designed to support 


15" 


a if 
total online 
PS eaee ite) 
eBay, says 
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secure transactional opera- 
tions over the Web and is 
now in beta. Ackley is cagey 
about the final release date, 
but he says it won’t be long. 
Greg Isaacs, eBay’s senior 
manager for platform evange- 
lism, says, “We didn’t origi- 
nally look at Web services as 
a competitive advan- 
tage, but now we do.” 
The company also has 
struck deals with Bor- 
land Software Corp. 
and Microsoft Corp. to 
integrate tools for pro- 
grammers to easily 
link eBay and PayPal 
into applications with 
their respective software de- 
velopment platforms. A ver- 
sion of Borland’s JBuilder 
suite for Java will likely ship 
with eBay’s tools in early ’05, 
Isaacs says. Windows devel- 
opers won’t need to wait that 
long. Borland will provide 
eBay integration for .Net ap- 
plications when it releases an 
update to its Delphi program- 
ming environment later this 
month. And Microsoft will in- 
clude similar capabilities in a 








planned release of Visual Stu- 
dio Express early next year. 
Who knows? Maybe the new, 
used and simply weird stuff 
idly depreciating on your 
company’s books can make 
some money alongside all the 
Elvis paraphernalia. 


Web app development 
demands... . 

. .. thinking small. That’s the 
argument Jason Fried makes. 
He’s the founder of 37 Signals 
LLC, a Web development 
house in Chicago. Fried ap- 
plies smallness not just to the 
development team, but to the 
application itself. Don’t make 
a half-baked product, “make 
half a product,” he says. Re- 
jecting end-user-friendly 
schools of thought, Fried says 
IT developers “ought to say 
no by default” to users’ re- 
quests for added features. 
Not necessarily to their faces, 
but as a matter of internal 
policy. The point, he says, is 
to deliver a solid product as 
quickly as possible, and you 
can’t do that if you’re con- 
stantly throwing in new re- 
quirements. Plus, the hidden 
costs of adding features dur- 
ing development can be oner- 
ous. For example, developers 
may have to update docu- 
mentation and modify user 
interfaces. Fried thinks a bet- 
ter idea is to include the most 
sought-after new features in 
an update as soon as 30 days 
after you release an applica- 
tion. That approach builds 
goodwill among end users 
and reduces the chance that 
you'll encounter those hidden 
costs, he claims. 


Protect your app... 

. .. With a software licensing 
tool. New York-based jPro- 
ductivity LLC will ship a new 
version of its Protection li- 
censing framework that lets 
developers control usage 
rights. Alexander Krivov, the 
company’s CEO, claims that 
even corporate IT shops need 
to protect their intellectual 
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HOT TECHNOLOGY TRENDS, NEW PRODUCT 
NEWS AND INDUSTRY GOSSIP BY MARK HALL 


property. He 
says that ina 
world where 
Web services 
and Java com- 
ponents are 
intermingling 
in applica- 
tions, IT 
managers 
should have 
more fine- 
grained con- 
trol over maintaining their 
rights to code. The new pro- 
fessional version of Protec- 
tion ships at the end of this 
month and supports a variety 
of license models. Pricing 
starts at $299. 


Users push Plumtree 


onto Java train. . . 

. .. with the company’s recent 
release of its Enterprise Web 
Suite portal. According to Jay 
Simons, vice president of 
product marketing and strate- 
gy at Plumtree Software Inc. 
in San Francisco, the 100% 
Java product was necessary 
not just to win bids, but to 
compete at all. “This opens 
up opportunities that we 
haven’t been able to compete 
for because some companies 
have an ideology about pure 
Java,” Simons says. The soft- 
ware runs only on Solaris 
now, but expect AIX, HP-UX 
and Linux releases over the 
next six months. You also 
might want to look at Plum- 
tree’s 6.0 release of its Con- 
tent Server software. Due 
next month, the upgrade lets 
you use Microsoft Office 
applications to locate, open, 
alter and save files in your 
Plumtree portal. Although 
that was pos- 
sible before 
through a se- 
ries of menu 
choices, Con- 
tent Server 
6.0 makes it 
a point-and- 
click fea- 
ture. Cool. 


@ 49907 
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Your potential. Our passion. 


Mr. 40% Less 
Time Spent on 
Maintenance and 
Administration 


PING 


“Instead of putting out fires, we now focus 
on ways we can deploy new technologies 
that benefit our customer service.” 


Dave Chacon 
Manager, Technical Services, PING 


Make a name for yourself with Windows Server System.™ Microsoft Windows Server System 
makes it easier for golf club maker PING to manage the infrastructure serving their 400 end users. 
Here's how: By using Windows Server™ 2003 with Active Directory,° PING now centrally manages 
all its servers, desktops, and end users from one location. This cut annual administrative time by 
800 hours. Time that can now be spent developing new ways to support customers, partners, 
and employees. Software that’s easier to manage is software that helps you do more with less. 
Get the full PING story at microsoft.com/wssystem 
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New WebSphere release can detect 
outages, shift data processing workloads 





BY HEATHER HAVENSTEIN 
BM LAST WEEK unveiled 
an upgrade of its Web- 
Sphere application server 
software that includes 

new features designed to pro- 

tect applications from system 
downtime and boost efforts by 
developers to create service- 
oriented architectures. 

Version 6 of the WebSphere 
Application Server can detect 
system outages and ensure 
that transactions are handed 
off to another server to quick- 
ly restore processing opera- 
tions and minimize the finan- 
cial impact of downtime, said 
Bob Sutor, IBM’s director of 
WebSphere foundation soft- 
ware. “If these transactions 
don’t take place or are stalled 
in some way, someone is going 
to have to pay,” he said. 

Sutor added that instead of 
forcing end users to wait while 
a server is restarted, Web- 
Sphere can document what 
the disabled system was doing 
when it crashed and shift the 
transaction workload to a fail- 
over machine in the same data 
center or at another location 
— all in less than 10 seconds. 

The features are designed to 
meet the needs of large com- 
panies that require “a lot of as- 
surances and a lot of fault tol- 
erance,” said Shawn Willett, 


Correction 

Due to inaccurate information 
provided by storage switch ven- 
dor McData Corp., a story in last 
week's News section contained 
several errors about the technol- 
ogy being used as part of a stor- 
age-area network project at 
State Street Corp.'s investment 
management unit (“Financial 
Firm Consolidates SANs With 
Eye Toward ILM”). A corrected 
version of the story is on our Web 
site at QuickLink 49780. 


| an analyst at Current Analysis 
Inc. in Sterling, Va. “This just 
senses things and does the re- 
covery automatically.” 

Walt Smith, chief architect 
in IT at a large financial insti- 
tution, said the functionality 
developed by IBM would be 
very appealing if it works as 
promised. “We have many 
mission-critical transactions 
that could benefit from the 
ability to perform geographic 
fail-over without loss of in- 
flight data,” he said, referring 
to transactions that are being 
processed when a system 


p Server 
uce System 


NEWS 


| problem arises. “The caveat 
would be that the technology 
would have to be bulletproof, 
because our customers would 
not tolerate any failure of the 
backup mechanism,” added 
Smith, who asked that his em- 
ployer not be identified. 


Differentiation Trend 

With Version 6, IBM is also 
standardizing the WebSphere 
programming model across 
the entire product family and 
continuing a shift of the J2EE 
application server market to- 
ward differentiation through 
proprietary features, said Mas- 
simo Pezzini, an analyst at 
Gartner Inc. “Users should 





come to terms with this trend 
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and evaluate the trade-off 
between greater functionality 
but risk of lock-in versus free- 
dom of choice but higher de- 
velopment costs,” he said. 
The new release is due by 
year’s end. IBM said it will sup- 
port several Web services stan- 
dards and include a new mes- 
saging engine for exchanging 
event data between systems. 
Version 6 has a wizard-based, 
drag-and-drop user interface 
designed to automate common 
application development tasks. 
Application availability will 
also be a key focus in the next 
release of BEA Systems Inc.’s 
rival WebLogic application 
server, which is due next sum- 
mer. WebLogic users will be 
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NEW FEATURES 


able to deploy and test a new 
version of a Web service ona 
production system without 
having to shut down the exist- 
ing application, according to 
BEA officials. They added that 
users will be able to apply 
software patches to servers 
without bringing down appli- 
cations that are running on a 
cluster of systems. @ 49961 





Clarify contract 
specs, copy private 
| IT best practices 


BY DAN VERTON 
WASHINGTON 


The U.S. Navy and Electronic 
Data Systems Corp. have 
agreed to scale back and 
streamline the performance 
measurements used to evalu- 
ate the progress that EDS is 
making on the $8.8 billion 
Navy/Marine Corps Intranet 
(N/MCID) project. 

Navy and EDS officials said 
this month that the agreement 
reduces the number of N/MCI 
service-level agreements from 
44 to seven and cuts the num- 
ber of performance categories 
from 192 to 27. 

Kevin Clarke, a spokesman 
for EDS Government Solu- 
tions, said the changes are de- 
signed to improve the N/MCI 
network’s efficiency. “Both the 
[Navy] and EDS recognized 
the need to establish more 
clearly defined performance 





metrics that more resemble 
commercial IT practices,” he 
said, adding that the revamped 
contract provisions give EDS a 
better idea of the service lev- 
els it must meet to achieve 
“100% seat billing” on N/MCI 
| deployments. 

Rear Adm. James Godwin, 
the Navy’s N/MCI program 
director, said the new SLAs 
and performance categories 
| should save money by reduc- 

ing administrative complexity 
and enable the Navy and EDS 
to more effectively monitor 
end-user experiences. 

“For instance, instead of fo- 
cusing on how long it took an 
e-mail to travel from sender to 
receiver, we were measuring 
how long the e-mail took to go 
from the sender to the first 
server, then to the second 
server, then to the third, until 
the e-mail finally reached the 
receiver,” Godwin said. 

He added that Navy officials 
“came to realize that our seg- 
mented, incremental approach 
to measuring N/MCI’s perfor- 








Navy, EDS Modify Performance 
Measurements on Intranet Project 


New Provisions 


mance was flawed and really 
didn’t ... reflect the end-user 
services received.” 

Other contract changes in- 
clude replacing an incentive 
provision under which EDS 
received extra payments for 
meeting or exceeding SLAs 
with one that penalizes the 
company if it falls short of 
agreed-to service levels. The 
penalties would be applied on 
a quarterly basis, whereas the 
incentives were paid annually. 

In addition, performance 
measurements will now be 





weighted according to the 
Navy’s service priorities in- 
stead of assigning uniform 
weighting to all performance 
categories (see chart). And 
end-user satisfaction surveys 
will affect a portion of avail- 
able incentive funds for the 
contractor, Godwin said. 

N/MCLI is an enterprisewide 
network designed to connect 
about 360,000 sailors, Marines 
and civilian employees at 
more than 300 bases in the 
U.S. and overseas. The pro- 
gram is the largest federal IT 
contract ever awarded, but it 
has posed challenges for EDS. 

The company reported op- 
erating losses of $316 million 
stemming from the contract 
during the first half of this 
year, according to a filing sub- 
mitted to the U.S. Securities 
and Exchange Commission. 
The filing also said that EDS 
has tied $775 million worth of 
assets to N/MCI. EDS plans to 
provide additional informa- 
tion on the progress of N/MCI 
when it releases its third-quar- 
ter earnings on Oct. 25. 

“N/MCI remains a focus 
for EDS, given the contract’s 
size, use of cash and impact 
on earnings,” Clarke said. 


@ 49942 
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PeopleSoft Director 
Says Deal Possible 


A member of PeopleSoft Inc.’s 
board of directors said in a Dela- 
ware court that there’s a “high 
certainty” that the company 
would accept Oracle Corp.’s 
hostile takeover offer if the price 
were high enough. 

“Never did we imply that there 
were no set of conditions under 
which we could imagine being 
acquired by Oracle,” said board 
member Steven Goldby. He was 
testifying during a trial in which 
Oracle is challenging PeopleSoft’s 
anti-takeover defenses. 


EC Relaunches Its 
Probe of Oracle Bid 


The European Commission said it 


has restarted its investigation into | 
| is designed to help the bank 


Oracle’s bid for PeopleSoft after 
Oracle “substantially complied” 
with a request for more informa- 
tion that was issued in April. The 
commission also set a Nov. 9 
deadline for ruling on whether it 
would seek to block an acquisi- 
tion of PeopleSoft by Oracle, al- 
though a decision is expected to 
be issued later this month. 


Canadian Retailer 
Divests Apps Work 


Boston-based Keane Inc. said its 
Canadian subsidiary has signed a 
five-year deal to take over main- 
tenance of existing applications 
for Shoppers Drug Mart Corp., a 
Toronto-based drugstore chain. 
The two companies said 77 IT 
workers will be shifted to Keane 
as part of the agreement. Finan- 
cial details weren't disclosed. 


Short Takes 


UNISYS CORP. announced plans 
to lay off about 1,400 workers, a 
move that will reduce its 37,000- 
person workforce by 4%. . . . 
Looking to increase its market 
presence in Europe, AVAYA 

INC. said it has agreed to pay 
$635 million to buy Tenovis 
GmbH, a vendor of telecommuni- 
cations systems in Frankfurt. 





Companies Fight Back 
Against Phishing Scams 


| Take action to curb costs, stem loss of 


customer confidence — and customers 





BY JAIKUMAR VIJAYAN 
HE POTENTIAL ero- 
sion of consumer 
confidence in the 
online transaction 

process and the cost to com- 

panies resulting from phishing 
scams has triggered a multi- 
faceted response from some 
organizations. 

For example, London-based 
Barclays Bank PLC said last 
week that it has signed up for 
an antifraud service from New 
York-based Cyota Inc. 

Cyota’s FraudAction service, 
which Barclays piloted for 
three months earlier this year, 


more quickly detect and shut 
down phishing scams involv- 
ing the use of its brand. Fraud- 
Action uses a network of 
probes seeded around the Web 
to scan more than 400 million 
e-mails a day looking for signs 
of phishing attacks, said Amir 
Orad, a Cyota vice president. 

In some instances, the ser- 
vice has helped Barclays de- 
tect and shut down scamming 
attacks in less than one hour, 
said Stuart MacKenzie, senior 
portfolio manager at Barclays. 

“We wanted to ensure that 
we protected the integrity 


| of the channel and kept cus- 


tomer confidence at a level 
where Barclays customers 
continued using [online chan- 
nels],” MacKenzie said. 
Barclays’ move is similar 
to one announced recently by 
eBay Inc., which is another 
favorite target of phishers. 
EBay is using so-called Web 
Caller-ID technology from 
Austin-based WholeSecurity 
Inc. that’s designed to allow 
eBay users to verify the au- 
thenticity of a Web site. 
Other companies are taking 
action against phishing attacks 
as well. Last week, the New 


| York-based Financial Services 


Technology Consortium 





(FSTC) said a counterphishing 
initiative announced on Sept. 
20 had so far attracted Il fi- 
nancial services companies 
and 17 technology vendors. 
The initiative is focused on 
developing technology and 
operational safeguards for 
countering phishing. Partici- 
pants include CitiGroup Inc., 
J.P. Morgan Chase & Co. and 
Visa U.S.A. Inc. 


Growing Threat 

The efforts come at a time 
when there has been a signifi- 
cant increase in the number 
of phishing attacks, which 
involve the use of fake e-mails 
and Web sites to extract con- 
fidential information from 
users. The Anti-Phishing 
Working Group, an industry 
association, reported 1,974 
unique phishing attacks in July 
and said that average monthly 
growth rates had been exceed- 


THE ABILITY of new e-mail 
viruses to spread before fixes 
become available for them is 
nudging some vendors to look 
beyond traditional signature- 
based antivirus technology. 

Last week, Lindon, Utah- 
based Avinti Inc., a start-up with 
over $30 million in venture capi- 
tal funding, introduced an e-mail 
security appliance designed to 
detect and block as-yet-uniden- 
tified e-mail viruses. 

Unlike reactive signature- 
based products that block virus- 
es by matching patterns, Avinti’s 
iSolation server looks for devia- 
tions in e-mail behavior to identi- 
fy threats. It intercepts all e-mail 
heading into a corporate network 
and looks at all attachments or 
executables in the body. 

E-mail attachments and exe- 





SOURCE: FINANCIAL SERVICES TECHNOLOGY CONSORTIUM, NEW YORK 


ing 50% to that point. 
Companies are being forced 
to respond because of costs, 
said Gene Neyer, a managing 
executive of the FSTC effort. 
“There is a cost to the banks 
in terms of loss of consumer 
confidence; there’s a cost to 
banks in terms of their ability 


cutables are opened in a virtual 
execution module and inspected 


: for behaviors suggesting mali- 

: cious intent. Suspect e-mail is 

* quarantined or filtered out based 
= onuser preferences. 


The technology doesn’t re- 


: place signature-based antivirus 

- products, said Teney Takahashi, 

: ananalyst at The Radicati Group 
> Inc. in Palo Alto, Calif. “It’s prob- 
: ably most effective as part of a 

* comprehensive antivirus strat- 

> egy.” he said. 


The Make-A-Wish Foundation 


: of Utah has been testing the iSo- 
: lation server for a few months 

: and has found it to be quite use- 

> ful, said network administrator 

: Darren Massey in Salt Lake City. 


Despite some early problems 


> with false alarms, the technology 
: helped biock a recent virus that 





to conduct their own business 
[over the Internet],” Neyer 
said. Other costs come from 
the sharp increase in customer 
support calls following a 
phishing attack and the ex- 
pense related to replacing 
compromised cards or pass- 
words and other confidential 
data, he said. 

Dealing with the problem 
involves battles on multiple 
fronts, MacKenzie said, and 
technology approaches such 
as Cyota’s address only part of 
the problem. Because phishing 
attacks cross international 
borders, broad cooperation 
among law enforcement au- 
thorities and Internet service 
providers in different coun- 
tries is required to effectively 
deal with the issue, he said. 
Greater effort also needs to be 
made in educating people 
about the issue, he added. 

“You can have great mouse- 
traps for catching such at- 
tacks, but it’s very difficult to 
shut them down,” given the 
cross-border nature of the 
problem, said Avivah Litan, an 
analyst at Gartner Inc. Even 
so, deploying defensive mea- 
sures is the best that compa- 
nies can do, she said. 

“Tt’s better than not doing 
anything,” Orad said. @ 49944 


: had gotten past the organiza- 
: tion's defenses, Massey said. 
: “It's given us another layer of 
: protection,” he said. 


Avinti’s announcement is sim- 


> ilar to the one made earlier this 

> month by lronPort Systems Inc., 
: aSan Bruno, Calif.-based ven- 

* dor of e-mail security appliances 
: and services. lronPort now sells 
: an appliance featuring the new 

: Virus Outbreak Filter, which uses 
* information culled from an Iron- 

: Port spam-filtering database to 

> identify new e-mail viruses. 


In beta tests by Electronic 


: Data Systems Corp. and some of 
: its customers, the lronPort filters 
: have provided warnings about 

> few viruses hours in advance, 

> said Richard Parvins, a systems 
= engineer at EDS. 


~ Jaikumar Vijayan 
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Consider the dots connected. By combining networking, Internet and long distance 
services into a single turnkey solution, we're helping one of the largest healthcare 
providers in Texas stay connected. Move large amounts of critical data quickly and 
reliably. Adapt to long-term growth efficiently. And save money along the way — more 
than $1 million over the next three years. Find out more about how we're helping 
Daybreak Venture connect the dots at sbc.com/dots. GOING BEYOND THE CALL° 
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New Tools Let Users Open 
Mainframe Data to Web Apps 


Attachmate adds software that enables 
blending of legacy info, Web services 





BY HEATHER HAVENSTEIN 
TTACHMATE CORP. is 
upgrading its main- 
frame connectivity 
product line with a 

pair of new tools designed to 

help software developers 
more easily tap into legacy 
data when building Web- 
based applications. 

The Bellevue, Wash.-based 
vendor last week announced 
its Synapta Presentation 
Builder and Services Builder 
tools, which abstract main- 
frame data so developers can 
use it in new types of applica- 
tions. Markus Nitschke, vice 
president of corporate market- 
ing at Attachmate, said the 
new tools “provide legacy ac- 
cess and put a layer of abstrac- 
tion on top so you can create a 
Web service,” enabling main- 
frame applications to be incor- 
porated into service-oriented 
architectures (SOA). 

Harbor Federal Savings 
Bank in Fort Pierce, Fla., has 
used the Synapta products 
to build access to customer 
account data housed on a 
Unisys Corp. mainframe into 
Web services that support on- 
line banking transactions and 
inquiries, said Annetta Smith, 
the bank’s vice president of IT. 

“We needed to ... be able to 
go and hit the host and hit dif- 
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ferent parts of the host,” Smith 
said. With Synapta, the bank’s 
developers can direct the Web 
services to retrieve the main- 
frame data, she added. 
Vendors such as Attach- 
mate, WRQ Inc. and NetMan- 
age Inc. are trying to meet de- 
mand for tools that can help 
developers take internally 





facing applications and expose 
them to external users without 
having to touch the mainframe 
code, said Dale Vecchio, an an- 
alyst at Gartner Inc. 

“Products like Synapta are 
generally noninvasive,” Vec- 
chio said. “SOA is the savior of 
the mainframe [because] it’s 
going to cause people to use 
the business logic in place and 
expose it as services.” 

First American Default 
Technologies in Anaheim, 


Calif., has used WRQ’s Vera- 
stream host integration soft- 
ware to tie its mainframe data 
to an online loan-tracking ap- 
plication built around Micro- 
soft Corp.’s .Net technology. 
With Verastream, the mort- 
gage default servicing compa- 
ny was able to provide bankers 
and lawyers with Web-based 
access to loan information 
stored on its mainframe, said 
Glen Banta, First American’s 
director of client technology. 


www.computerworld.com 


Developers were also able 
to abstract and isolate the 
mainframe data in order to 
create a series of reusable ser- 
vices that can be combined 
with new business logic in Vi- 
sual Studio .Net, Banta added. 

“You just go through using 
their design tools and map out 
your screens,” he said. “Once 
we have these models to ac- 
cess the host system, it basical- 
ly turns the mainframe into a 
SQL database so you can lever- 
age all types of applications.” 

The Synapta tools are due 
for release next month. Pric- 
ing starts at $125,000 per run- 
time for Presentation Builder 
and $65,000 per runtime for 
Services Builder. @ 49960 
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and not large proprietary box- 
es,” said Chris Brien, a systems 
| analyst at Mark’s Work Wear- 

house Ltd. in Calgary, Alberta. 

The retail chain is using 
IBM iSeries servers, which 
bundle WebSphere with the 
hardware, so open-source ap- 
plication server software isn’t 
yet part of its IT planning, ac- 
cording to Brien. But he said 
he expects that will change. 

Thomas Murphy, an analyst 
at Meta Group Inc., said that 
his firm has seen open-source 
application servers primarily 
used for development purpos- 
es but that it’s starting to see 
corporate uptake of the JBoss 
Application Server in produc- 
tion applications. Still, the 
JBoss server’s market share re- 
mains small, at about 5%, Mur- 
phy said. 

Some companies, such as 
Hawaiian Electric Co., contin- 
ue to harbor concerns about 
support. The Honolulu-based 
power company runs the 
Apache Tomcat servlet con- 
tainer in its test environment 
and has debated bringing the 
server into production, ac- 
cording to Richard Eber, direc- 
tor of development services. 

“The IT staff is spread so 
thin that it is difficult to be 
able to develop an in-depth 
knowledge in any one prod- 
| uct,” he said. “If we were to 











use an open-source applica- 
tion server in production, we 
would need to have a support 
contract with someone we 
could call 24-by-7 in case we 
got in over our heads.” 

Eber said Hawaiian Electric 
has been a Microsoft shop for 
years and is only beginning to 
get its arms around J2EE tech- 
nology. So far, that tends to be 
when one of its software prod- 
ucts requires J2EE, such as the 
Vignette Corp. software that 
supports its Internet and in- 
tranet presence. 


Support Factor 

Unlike some open-source of- 
ferings, support is available 
for the new JBoss Application 
Server 4.0. Pricing starts at 
$10,500 per year for a single 
application, according to a 
JBoss spokeswoman. Support 
and services are also available 
from JBoss Authorized Ser- 
vice Partners, which include 
Computer Associates Interna- 
tional Inc., Hewlett-Packard 
Co., Novell Inc. and Unisys 
Corp. 

But support isn’t the only 
factor holding back some 
companies. Ramu Kannan, a 
director of IT at Humana Inc., 
said the Louisville, Ky.-based 
health care provider wants to 
limit the number of applica- 
tion servers it needs to deploy. 
Its choice of application 
servers is driven by the rec- 
ommendations of independent 
software vendors, and so far, 





Application Server 


BEA WebLogic Server 


Development IE) 
Production TTD 


IBM WebSphere 
Development (aaa 361 
Production [qa 349 


Development (SE 316 
Production (ga 213 


Development (i 180 
Production jig 162 
Survey base: 1,148 middleware professionals 


drawn from TheServerSide.com, an online 
community of J2EE practitioners 


Note: Listed products were top four respons- 
es. Study was commissioned by Sun Micro- 
systems. The Middleware Co. is a wholly 
owned subsidiary of Veritas Software Corp. 


SOURCE: THE MIDDLEWARE CO., JUNE 2004 


they either haven’t steered 
Humana toward open-source 
products or have certified 
their applications only for 
IBM’s WebSphere or BEA’s 
WebLogic, Kannan said. 

Walt Smith, chief architect 
in IT at a large U.S.-based fi- 
nancial institution that he 
asked not be named, said his 
company requires tight inte- 
gration of its J2EE-based ap- 
plication server with its secu- 
rity infrastructure to protect 
mission-critical customer ap- 





plications. He declined to 
identify the application 
server vendor, citing security 
concerns. 

“We view the distributed 
application server as a core 
component of our services ar- 
chitecture and therefore re- 
quire a higher degree of inter- 
operability and integration 
support for legacy systems 
than is available in most open- 
source application servers,” 
Smith said. 

Now that the JBoss offering 
has gained J2EE 1.4 certifica- 
tion, interoperability concerns 
may be less of a worry. 

But Shawn Willett, an ana- 
lyst at Current Analysis Inc. in 
Sterling, Va., noted that JBoss 
is “very techie,” geared more 
toward hard-core program- 
mers, and that it doesn’t have 
all the “bells and whistles” 
that the commercial offerings 
from IBM and BEA do. 

“They are working on it,” 
Willett said, adding that At- 
lanta-based JBoss has added 
support for enhanced features 
such as clustering. 

The competition is certainly 
paying attention to open- 
source application servers. 
BEA, for instance, stopped 
charging for developer licens- 
es in March 2003 in response 
to the growing usage of free 
options, said Eric Stahl, senior 
director of product marketing 
at BEA. Other vendors, includ- 
ing IBM, have also done that. 
@ 49955 
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ILM Projects 


the Storage Networking Indus- 
try Association. 

Users and storage vendors 
alike agreed that most ILM 
strategies are still works in 
progress. In addition to the in- 
ternal challenges that IT man- 
agers have to contend with, 
ILM standards are lacking, at- 
tendees said. They also cited a 
need for more automated data 
migration capabilities and bet- 
ter integration between appli- 
cations and storage devices. 

But the sheer volume of in- 
formation makes it imperative 


your storage 
capacity on a SAN. 


the data for storage 
eet nee 


* service-level agreements 
for end-user access to data. 


= using automated 
eel erm COME Ut mer Lee] 
storage and migration. 


. standard storage man- 
Feu m te (atee Legs) 
PMU Ree 





that companies begin classify- 
ing data and managing it via 
automated policies, said users 
such as Scott McIntyre, CIO at 
Quantum Corp. in San Jose. 

The need to comply with 
the Sarbanes-Oxley Act and 
other regulations “provides 
the opportunity for us to blud- 
geon our business units to 
where we need to go” with 
ILM, McIntyre said. Quantum, 
which makes disk and tape 
drives, is moving from a stor- 
age approach built around data 
warehousing to what McIntyre 
described as an information 
retention model. But, he 
added, the company is “in the 
early stages” of the project. 

The potential business ram- 
ifications of not adopting ILM 
“are absolutely huge,” said Joel 
White, lead IT architect at All- 
state Insurance Co. in North- 
brook, Ill. White added that 
Allstate’s ILM strategy is 
twofold: The insurer is trying 
to achieve an enterprisewide 
view of all its data while con- 
solidating and centralizing its 
storage infrastructure. 

Mike Peterson, an analyst at 
Strategic Research Corp. in 
Santa Barbara, Calif., and pro- 
gram director for the SNIA’s 
Data Management Forum, said 
the key issues driving ILM 
adoption include an inability 
to effectively manage data and 
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SNIA Plans Standards Work to Help Boost ILM Usage 


LONG BEACH, CALIF 


Less than 10% of all corporate 
data is transactional, according 
to consultancy McKinsey & Co. 
The rest is fixed data that poten- 


tially could be stored on low-end: 


disk arrays. Yet prior to being 
archived, the vast majority of 
data is still stored on primary 


disk systems with annual operat- : 


ing costs of between 45 and 55 
cents per megabyte. 

“If you're not accessing it, 
don't leave it there,” said Lou 
Harvey, a member of the Stor- 


age Networking Industry Associ- : 


ation’s Data Management Fo- 
rum. “That's where your cost 
savings will be realized.” 

How to lower storage costs 
through the use of standardized 
ILM practices was the focus of 
several discussions led by mem- 


| a desire to get information out 


of the silos where it has tradi- 
tionally been stored. But deal- 
ing with the sheer mass of 
data “is really an ominous 
challenge for the IT group,” 
Peterson said. 

Another major issue identi- 
fied by conference attendees 
was the need to keep old ap- 
plications running in order to 
access and read archived data. 


bers of the SNIA’s ILM Technical 
Working Group at the ILM Solu- 
tions Conference. Working 
group members also detailed 
plans to develop best-practice 
guidance for users and vendors 
to follow in automating the mi- 
gration of data across tiers of 
storage devices. 

Chief among the efforts that 
will take place over the next two 
years are initiatives to standard- 
ize the way different industries 
classify their data for storage 
and create interoperability stan- 
dards between business appli- 
cations and the middleware 
used to manage data migration 
procedures. 

“Classify the data, and we can 
build whatever storage facilities 
we need to store it,” said Jim 
Carlson, a senior technical 


Peter Delle Donne, CEO of 
Iron Mountain Inc. in Boston, 
said the archiving services 
vendor recertifies older busi- 
ness applications on its sys- 
tems after upgrades to ensure 
that archived data can still be 
accessed. Delle Donne added 
that he has sometimes been 
able to avoid the costly prac- 
tice by saving data in Portable 
Document Format files. With 





SAP Beefs Up Java Support 
Capabilities for NetWeaver 


BY MARC L. SONGINI 
Looking to penetrate further 
into the software infrastruc- 


ture market, SAP AG last week | 


announced p!ans to add new 
Java and business intelligence 
capabilities to its NetWeaver 
suite of middleware and appli- 
cation integration tools. 

At its SAP TechEd 2004 de- 
veloper conference in San 
Diego, the software vendor 
said it’s building technology 
into NetWeaver that’s de- 
signed to boost the reliability 
of Java-based applications. 
The so-called container tech- 
nology uses standard Java vir- 





tual machine code and pro- 
vides a lockdown feature that 
isolates end users from one 
another in order to prevent 
system errors from having a 
widespread impact, said Peter 
Graf, senior vice president of 
collaborative solutions at SAP. 

“What it means from a user 
perspective is that the system 
doesn’t crash,” Graf said. 
“We’ve taken the reliability of 
SAP and made that capability 
available in Java.” 

To speed access to data for 
business intelligence uses, 
SAP is beefing up the query- 
processing capabilities in Net- 





Weaver by adding advanced 
storage and search techniques, 
such as vertical decomposi- 
tion, horizontal partitioning, 
smart compression and in- 
memory processing. It said the 
new features are aimed at 
users with high data volumes, 
a large number of simultane- 
ous data requests and unpre- 
dictable types of queries. 

The Java and business intel- 
ligence upgrades are due in the 
next version of the NetWeaver 
platform, which is scheduled 
for release next year. 

SAP also introduced an up- 
grade of NetWeaver’s Master 





Data Management module, 
available immediately. The 
company said it plans to adda 
global data synchronization 
tool in December that’s opti- 
mized for the retail and con- 
sumer products industries. 
David Dobrin, an analyst at 
Cambridge, Mass.-based con- 
sultancy B2B Analysts Inc., 
said the data synchronization 
tool is “terribly important” for 
companies that plan to install 
supply chain systems based on 
radio frequency identification 
technology. It could also play a 
big role in inventory manage- 
ment applications, he said. 
SAP has many consumer 
product manufacturers among 
its user base, Dobrin said, so 
“anything they can do for them 
in this area will be welcomed 
as a step, however small, in the 
right direction.” @ 49962 





. Staffer at IBM's storage systems 
: division and a member of the ILM 
* working group within the SNIA. 

> Carlson said it should take the 

: working group about six months 
: tocome up with a methodology 

: for classifying data. 


Jim Doustou, technical direc- 


: tor at Cambridge, Mass.-based 

* storage software vendor Per- 

* mabit Inc., is involved in the 

> SNIA's efforts. He said that once 
: standards are established, data 

> classification shouldn't be an ar- 
> duous task for users. Generally, 

: the process shouldn't take more 
: than six to eight weeks per line 

: of business, he said. 


"Do not do this as a big 


: bang,” Doustou advised. But, he 
: added, “you can’t deploy [ILM] 
: technology until this is in place.” 


~- Lucas Mearian 


PDFs, “we can present the in- 
formation for a long period of 
time,” he said. 

But others disagreed that 
PDF files are a viable means 
of staving off business appli- 
cation upgrades for archived 
data. 

“PDF is not the answer,” 
said Tom McGuire, director of 
IT at a large pharmaceutical 
company. “In fact, it’s a big 
problem.” McGuire, who 
asked that his company not be 
identified, noted that an up- 
graded version of PDF soft- 
ware he purchased last year 
wouldn’t access data archived 
in an earlier format. 

Jim Zhou, a senior program- 
mer/analyst in the IT architec- 
ture and engineering group at 
Genentech Inc. in South San 
Francisco, Calif., said storage 
managers need to convince 
their company’s business units 
that all of their data doesn’t 
have to be stored on high-per- 
formance disk arrays. 

Storage vendors should de- 
velop standardized proce- 
dures for IT departments to 
follow in classifying data and 
setting service-level agree- 
ments with business units, 
Zhou said. He added that busi- 
ness managers could then 
choose from a menu of ILM 
options. @ 49929 
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consensus will have to be calls seeking comment. A 
BY TODD R. WEISS Libutti wrote. He went onto | technology and resource | built between the DHS and spokesman for the FBI, which 
The U.S. Department of reject the report’s recommen- | needs and then coordinate DOJ before more data-sharing | is part of the DOJ, declined to 
Homeland Security still isn’t dation that his unit set up an their allocation. | improvements can be made. comment about the inspector 
doing enough to integrate in- interagency group to identify | AspokeswomanforErvin | “We can’t force their hand,” | general’s report. @ 49908 
formation that’s stored in a ae 
dozen terrorist watch-list 
databases maintained by nine 
federal agencies, according to a ' i 3 
a report by the inspector gen-_ | 


eral at the DHS. Align al vide Your . A STURT Aare 


DH S Fc | d f T 2 D Ww said the disagreement over | the spokeswoman said. 
au te or errorist ata ges responsibility means that a | DOJ officials didn’t return 
| 
| 


The report, which was is- 
sued internally in August and e 
made public on Oct. 1, criti- 
cizes the DHS for “not playing 
a lead role in consolidating ter- 
rorist watch-list information” 
despite the fact that the agency 
was given that responsibility 
when it was created in 2002. 

The formation last year of 
two interagency organizations 
by the CIA and the FBI has 
helped the government make 
progress in sharing watch-list 
data that’s used to monitor and 
apprehend terrorists, the re- 
port says. But, it adds, planning, ry | Enter 8 rise 
budgeting and staffingissues | 
related to the database inte- | 
gration continue to be handled Nv Small 
on an ad hoc basis because of 
“the lack of central leadership | sensed pat 
and oversight,” which the DHS | Penna eels 
should be providing. NA 


than an hour. 
Coordination Challenges 
The report, signed by DHS In- 
spector General Clark Kent 
Ervin, notes that the agency 
said it initially lacked the re- 
sources to coordinate the 
watch-list work. In addition, 
the DHS faced major IT chal- 
lenges, including the need to 
integrate the financial systems 
of its 22 member agencies, de- 
velop a departmentwide IT in- < 
frastructure and create an in- é h Miuilti-chauinel selleservice 
formation assurance program. t abies ar a a 

And in a written response to ae . 
the inspector general’s report, 
Frank Libutti, the DHS under- 
secretary for information 
analysis and infrastructure : 
protection, said he strongly 4 eg 
disagrees that the agency has Py Remedy : 
the lead responsibility for con- 
solidating the watch-list infor- 
mation in the first place. 

A presidential directive 
signed in September 2003 
stated that responsibility for 
the effort would rest with the 
U.S. Department of Justice, 
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OPINION 


DON TENNANT 


Handicapped Thinking 


HREE WEEKS AGO in this space, I men- 
tioned that I had a signed copy of Bill 
Gates’ book Business @ the Speed of 
Thought, and I said I'd auction it off to 
raise money for The ALS Association. 
The winning bid was an even $100, and it came from 
Steve Jenkins of the M.D. Anderson Cancer Center 


in Houston. I know 
Steve’s generosity is 
greatly appreciated by 
the association, which is 
dedicated to finding a 
cure for ALS, also known 
as Lou Gehrig’s disease, 
and by my dad, who is 
one of its victims. 

In that same column, I 
referred to the proclivity 
of “Linux loonies” to re- 
ward anyone who makes 
a critical comment about 
Linux with a barrage of hate mail. 

In fact, I was speaking from experi- 
ence: A few years ago, I wrote a 
tongue-in-cheek column in which I 
poked fun at the stupid penguin and 
at the absurd cult following of Linux 
creator Linus Torvalds. And sure 
enough, I received dozens of ven- 
omous e-mails from his followers. I 
remember one in particular that said 
I should “burn in hell,” and another 
that labeled me a “Bill Gates love 
slave.” In fact, a common theme of 
these folks is that anyone who would 
dare disparage Linux is necessarily a 
toady of Gates and Microsoft — for 
which they seem to have an irra- 
tional and disturbingly intense 
loathing. 

Predictably, the e-mails I received 
from the Linux crowd following my 
“loonies” comment chided me for 
expecting anyone to be interested in 
a book written by Gates. 

“I noticed your intent to auction 
off your autographed copy of Busi- 
ness @ the Speed of Thought,” one 
person wrote. “I checked Amazon, 
and the going price is $0.01. New 
copies are going for $0.98. Since your 





copy is signed by Gates, 
I'll bid a whole dollar.” 
And, he continued, “Seri- 
ously, why don’t you auc- 
tion off a boxed Linux 
[distribution] like Man- 
drake or SUSE (the least 
expensive you can find) 
at the same time. If you 
do, I'll start the bidding 
at $100.” 

That theme was 
echoed by another corre- 
spondent: “Well, consid- 

ering how many times I’ve had to 
deal with Billy’s products and virus- 
es, clueless tech support, blue 
screens of death, security holes, 
hackers — I tell ya what,” this person 
wrote. “You give me 20 bucks, and 


| I’ll haul it to the dumpster for ya.... 


Anyone that thinks I'd actually pay 
for that thing is ... just a fool.” 


What these people just don’t seem 
to get is that they don’t need to be 
so mindlessly defensive anymore. 
Linux is no longer just the operating 
system of choice for a band of free- 
spirited, defiant techno-geeks. It’s 
the operating system of choice for 
a growing number of Fortune 500 
companies that are using it to run 
critical, enterprisewide applications. 
So these sorts of rants bespeak an 
outdated mentality that can only 
handicap Linux’s adoption by per- 
petuating the impression of its im- 
maturity. 

What’s especially harmful is that 
it tends to be a mentality of intoler- 
ance. After I thanked that second 
correspondent for taking the time to 
write, he sent me this reply: “That 
wasn’t a joke. I’ve been regularly as- 
tounded that people accept this poor- 
quality software as much as they do. 
Heck, if I had cranked out this kinda 
crap when I was a junior program- 
mer, I'd be an auto mechanic now!” 

I wonder. I’ve known some bril- 
liant, dedicated auto mechanics. Like 
my dad, for one. @ 49904 
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THORNTON A. MAY 


The Why and 
What of the 
CFO for IT 


RANKLIN ROOSEVELT’S 

last written words from 

Warm Springs, Ga., in the 
spring of 1945 counseled global 
leaders and ordinary citizens 


alike on the need “to cultivate 
the science of human relationships.” 
On the IT scene, a new player, the CFO 
for IT, is playing a huge role in this 
area, bridging the very significant gap 
between the internal IT and financial 
camps (see “The Number Crunchers,” 
page 37). 

I'll discuss what a 
CFO for IT does, but 
first, let’s look at the 
state of this relation- 
ship. Data collected 
over three days from 
300-plus CFOs at- 
tending the IT Lead- 
ership Academy, 
sponsored by Law- 
son Software, unam- 
biguously demon- 
strates that IT lead- 
ers and finance pro- , 
fessionals need to work much harder to 
get on the same page. Here’s some of 
what we learned from the CFOs: 


WHAT IS YOUR HUMAN RELATIONSHIP 
WITH IT LEADERS? 


“My best friends.” 12% 
“Trusted colleagues.” 29% 
“Business colleagues, no more, no less.” 35% 
“People | worry about.” 18% 
“Enemies.” 6% 


Ce eeerceeeceesseseseseseeseees 


WHAT IS YOUR BUSINESS RELATIONSHIP 
WITH YOUR COMPANY'S Ci0? 


“We're joined at the hip. We are so synchronized, 
we almost finish each other's sentences.” 0% 
“On the big things, we pretty much agree.” 50% 
“There are a few spots where we 

agree to disagree.” 39% 
“We are constantly arguing.” 6% 
“Sometimes | think the guy is from Mars.” 5% 


HOW OFTEN DO YOU AND IT LEADERS MEET 
PHYSICALLY TO TALK ABOUT COMMON ISSUES? 


Every day 16% 
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37% 
36% 
11% 


HOW LONG HAVE YOU WORKED 
WITH THE CURRENT CIO? 


Every week 
Every month 
Every quarter 


12% 
46% 
24% 
18% 


DO IT LEADERS SPEAK THE 
LANGUAGE OF BUSINESS? 


28% 


Less than 10 years 
Less than five years 
Less than two years 
Less than a year 


Fluently 
Passably 55% 
Mute 17% 


DO FINANCIAL LEADERS SPEAK THE 
LANGUAGE OF TECHNOLOGY? 


Fluently 
Passably 55% 
Mute 40% 


Since the term chief information offi- 
cer first appeared in 1987 (in William R. 
Synott’s book The Information Weapon), 
the chieftains of the technology and fi- 
nance tribes have mostly operated in a 
world of antagonism and limited un- 
derstanding of each other’s roles. 

A detailed analysis of organizations 
that extract the highest value from IT 
investments today reveals three com- 
mon traits: 

® A good working relationship be- 
tween IT and finance. 

@ A well-managed, highly interac- 
tive, real-time and reasonably trans- 
parent IT investment process. 

@ The presence of a tribal go- 
between — frequently referred to 
as the CFO for IT. 

What do CFOs for IT do? 

They report to the CFO but work 
for the CIO. They put together the 
numbers for IT. They manage IT’s 
assets. They work with their col- 
leagues in the finance department to 
make financial decisions (such as 
which depreciation schedules to use 
and whether to lease or buy equip- 
ment). They maintain high-trust back- 
channel relations with executives in 
the finance department. They manage 
procurement. They manage the con- 
tractual side of the relationship with 
vendors, including auditing vendor 
performance. They establish common 
language and methods for identifying 
benefits of IT investments. ‘They man- 
age benchmark studies and IT perfor- 
mance information. 

The CFO for IT will play a big part 
in the future of IT. @ 49875 
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PIMM FOX 


Public Net 
Connections 
Put at Risk 


S WE HEAD into the 

home stretch of the 

presidential election, 
consider this snafu: Money to | 


support high-speed Internet | 
and telephone service in public li- 
braries and schools, as mandated by 
the Telecommunications Act of 1996, is 
being tied up in the type of red tape 
that would make a Christmas present 
impossible to open. About $1 billion 
that schoois and libraries were expect- 
ing from the E-Rate program to help 
pay the bills for Internet and telephone 
service won't be arriving anytime soon. 

Why? Because of a bureaucratic col- 
lision between the E-Rate program and 
the Anti-Deficiency Act, which is de- 
signed to enforce rigorous accounting 
methods for federal programs. The 
E-Rate program typically makes finan- 
cial pledges to schools and libraries 
that are greater than what is in its bud- 
get. Program managers say this isn’t a 
problem because the schools and li- 
braries spend less than 80% of the 
money they request. But the Anti-Defi- 
ciency Act says this isn’t the right way 
to run a government program, and 





In Praise of Change 


HE STORY DETAILING Paul In- 
gevaldson’s “IT Survival Guide” 
[QuickLink 48479] was a well-done 
piece. | enjoyed reading about a fel- 
low CIO who is moving on to the 
next phase of life by choice. 
John Townsend 
Carlsbad, Calif. 


One More Loophole 
In Data Destruction 


T MIGHT BE USEFUL to add anoth- 

er caveat to the matters addressed 
in Frank Hayes’ column of Aug. 30 
[“Shred, Burn, Erase,” QuickLink 
49071]. Users, especially develop- 
ers and other techies, often main- 
tain personal backups of whatever 
they're working on and, often, any- 





thing they've ever worked on. Why 
| would they do so ifit violates com- | 
| pany security policy? Because 
they've been burned by lost data. As | 
a practical matter, this risk exceeds 
by at least an order of magnitude 
the risk of data theft. Naturally, 
when users make personal back- 
ups, informal copies will appear on 
workstation drives, CDs, DVDs and 
all of the other kinds of media on the 
employee's home computer. Of 
course, not all of the copies are re- 
membered when it's time to clean 
house or move on to another em- 
ployer. You can't avoid this tenden- 
cy of employees entirely, but the 
reasonable among them wili be far 

| more likely to comply if a) the firm 
backs up their work in a regular, dili- 
gent and disciplined manner; 

b) the backups are frequently test- 





Michael K. Powell, chairman of the 
Federal Communications Commission, 
isn’t going to rock the boat on this one. 
He was reported as saying that any 
funding delays are temporary while he 
gets the program on a more solid foot- 
ing. That sounds nice, but why then 
did the FCC reduce the level of phone 
company contributions to the E-Rate 


program by $550 million? 


The FCC says it did this because the 


nonprofit Universal Service Adminis- 


trative Co. (USAC), which 
runs the program, appeared 
to have too much cash on 
the books, and that didn’t 
look good. 

The FCC and the White 


House have had a couple 


of years to work this out. 
Where is the education 
president on this? 

Anne L. Bryant, a board 
member of USAC, says it’s 
more than policy — it’s pol- 
itics. She’s been quoted as 
saying that “there was a lot of pressure 
to keep the [phone company] contribu- 
tion factor down until the election 
passes, after which it will then have 
to rise again.” And when it does, you 
can expect the cost to be passed on to 


} consumers. 


But in the meantime, some states 
have signaled that the lack of funding 
could shut down services for students 
and public libraries. 

Does this make sense? 

Not to me. 

It doesn’t make sense to put stu- 


! dents and library visitors at a disad- 


Larry Brunelle 
Allen, Texas 








restored; and c) the employees are 
made entirely aware of a) and b). 
Where a firm allows work to be 
done from home, it might be reason- 
able for it to provide or subsidize ma- 
chines that connect to the VPN. 
| Thenit might reasonably request 
staff to present these dedicated ma- 
chines for maintenance at periodic 
intervals or at separation. 


Value Experience 


EAR! HEAR! to this statement: 
“Smart companies are enticing 
their older, wiser IT workers to re- 
main on the job a little bit longer” 
[* Staying Power,” QuickLink 48720]. 
Most CEOs are fattening their wal- 
lets with the so-called cost savings 


vantage because a bunch of politicians 
in Washington want to strangle a piece 
of legislation that is already law. 

But this shouldn’t come as a sur- 
prise. Politicians attack legislation they 


| don’t like with delays and obfuscation. 


After all, students don’t vote. And, 
heck, who goes to the library? Only 


| those who don’t have lots of money to 
| spend on books and Internet access — 
| or on political contributions. 


Our priorities are screwed up if we 
don’t see the urgency in 
spending money each year 
to make sure schools and 
libraries have the funds to 
stay connected. 

By creating the delay, the 
White House and FCC are 
igniting three problems. 
The first is that, given 
the inertia of the federal 
government, commitments 
already made — about 
$1 billion — won't be met. 
The second is that 
putting off the spending means having 
to spend more in subsequent quarters. 
And finally, the worst problem of 
them all: Government small-minded- 
ness is hurting a group of U.S. citizens 
in a way that shuts them out of the In- 


| ternet and prevents equal access to in- 


formation and opportunity. And peo- 
ple wonder why politics is a dirty 
word. @ 49838 


WANT OUR OPINION? 


More columnists and links to archives of previous 
columns are on our Web site: 
www.computerworld.com/columns 





found in offshoring. But retaining 
the individuals who wrote your sys- 
tems and have key business know!- 
edge is invaluable. 

Tim Albrecht 

DBA, Wachovia Bank, 
Winston-Salem, N.C. 


COMPUTERWORLD welcomes 
comments from its readers. Letters 
will be edited for brevity and clarity. 
They should be addressed to 
Jamie Eckle, letters editor, Com- 
puterworld, PO Box 9171, 1 Speen 
Street, Framingham, Mass. 01701. 
Fax: (508) 879-4843. E-mail: 
letters@computerworld.com. 
Include an address and phone 
number for immediate verification. 


For more letters on these and 
other topics, go to 
www.computerworld.com/letters 
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1. Buyer downloads competitive pricing. 
2. Manager securely retrieves invoices. 

3. Driver obtains specific delivery details. 
4. Ex-vendor denied access to intranet. 

5. Customer’s identity protected from theft. 


MIDDLEWARE IS IBM SOFTWARE. !centity management 
software that uses single sign-on technology to ensure that 
the right access is given to the right people. Open, modular 
Tivoli security software that automates processes between 
employees, partners, customers and suppliers — while 
helping to reduce costs. It's how everyone involved 
gets the information they need. On time. And on demand 


ROBUST OBJECTS 
AND ROBUST SQL 


A FREE OFFER TO LOOK 
AT A BETTER DATABASE 


For your next generation of applications, a development environment that dramatically 
move to the next generation of database reduces the time to build and modify Web 
technology. We’re offering a free, fully functional, applications. 
non-expiring copy of Caché, the post-relational The reliability of Caché has been proven in 
database that uniquely combines advanced “life-or-death” applications at thousands of the 
objects and high performance SQL. world’s largest hospitals. With its high performance 

With Caché, no mapping is required between and low maintenance, Caché delivers your vision 
object and relational views of data. Which of a better DBMS. 
means huge savings in both development and We are InterSystems — a specialist in data manage- 
processing time. ment for over twenty-six years, providing 24x7 

Applications built on Caché are massively support to 4 million users in 88 countries. Caché is 
scalable and lightning-fast. Plus, they require available for Windows, OpenVMS, Linux and major 
minimal or no database administration. UNIX platforms, and it is deployed on systems rang- 

More than just a database system, Caché has ing from two to over 10,000 simultaneous users. 


InterSystems 


E. CACHE 


Make Applications Faster 


Try a better database. For free. 


Download a free, fully-functional, non-expiring copy of Caché or request it on CD at www.InterSystems.com/Free 


nts reserved. InterSystems Caché is a registered trademark of InterSystems Corporation. Other product names are products of there respective vendors. 8-04 
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Express Delivery 
Integrated appliances offer a 
range of technologies to im- 
prove the speed and security 


of Web-enabled applications. 


Page 28 
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FUTURE WATCH 

Grazing the Nanograss 

A material made of microscopic silicon posts, nano- 
grass may put a zoom lens in your cell phone. Bell Labs’ 
David Bishop (right) holds a chip with 256 nanograss 
micromirrors for network switching. Page 30 


SECURITY MANAGER’S JOURNAL 
Security Review Uncovers 
Rampant Virus Infections 

“CJ. Kelly,” our new journal writer, finds 
that she has a big problem just as the IT 
auditors are scheduled to arrive. Page 32 





HE REDUCED identity admin- 
istration costs, improved ac- 
cess to cross-organizational 
applications and better secu- 
rity promised by federated identity 
management systems are finally be- 
ginning to drive corporate interest, 
say proponents of the technology. 
But organizational trust concerns 
and nagging interoperability prob- 
lems continue to pose big chal- 
lenges. 
“Identity federation has been 
talked about for some time, but it is 
only now that we are really seeing a 
number of customers showing inter- 
est in it,” says Jason Lewis, vice presi- 
dent of product management at RSA 
Security Inc. in Bedford, Mass. 

“The main reason why users are 
looking at federated ID management 
is to make it easier to do business on- 
line for their customers, business 


Identity federation allows users to 
present a single set of identity and 
authentication information to access 
applications and services across multi- 
ple domains and distributed, heteroge- 


Though federated identitymanagementtech- 2 nosnewworks. a federated sytem 


allows a user’s identity in one domain 


nologies promise improved access to NetWOFkS : t© be used to gain access to resources 


in another domain without the need 


and cost savings, issues of trust and interoper- ® for separate authentication. 


Federated identity projects enable 


ability slow adoption. BY JAIKUMAR VIJAYAN singe si-on to cros-organizationa 


other identity 
management 
systems focus 

on improving in- 
ternal access to | 


. One company that’s implementing 
cross-domain authentication is insur- 

® ance provider Nationwide Financial 

, Services Inc., which recently deployed 
a federated identity system using tech- 
nology from RSA Security. 

The system lets thousands of Na- 
tionwide insurance agents and brokers 
°» gotoacentral portal site where they 

can access the Columbus, Ohio-based 


resources, while 


resources. 


company’s applications as well as ap- 


| plications hosted on sites belonging 
| to some of its partners. 


Previously, Nationwide’s agents 


needed to create separate accounts 

| and passwords with the third parties 

| to access their applications. The part- 
| ners, in turn, needed to maintain their 
| own lists of usernames and passwords 


for Nationwide’s agents. 
With identity federation, the agents 


| have to authenticate themselves only 
| once on the central Nationwide portal 
| and simply click on the appropriate 


links to access applications on the 
partner sites. 
RSA’s Federated ID Manager tech- 


| nology intercepts an agent’s request 


with his log-in information. It gener- 


| ates an encrypted Security Assertion 


Markup Language (SAML) message 


| containing the user’s identity profile 
| and other authentication information 
partners and their employees,” he says. | 


that the partner needs in order to let 


| the user access its applications. 


The SAML assertion and the brows- 


| er session are then directed to the 


partner’s site, where another federa- 
tion server or agent parses the pack- 


| aged identity information and uses it 
| to grant access to the application the 
agent wanted. 


Such cross-domain identity asser- 


| tion can yield multiple benefits, says 


Daniel Blum, an analyst at Burton 


Group in Midvale, Utah. 


“There are many different use cases 
for federation in the business-to-busi- 
ness, business-to-employee and busi- 
ness-to-consumer [areas],” Blum says. 
For example, an organization might 
federate identities to provide employ- 


| ees with access to benefits informa- 


tion, enable better information access 


| to business partners or deliver more 


| 
| 
| 
| 


integrated services to consumers. 

Federation can also improve securi- 
ty. For example, since identity informa- 
tion is centrally administered and 
managed, it becomes easier for compa- 
nies to deprovision access to federated 
resources when an employee leaves a 
company or is terminated. 
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Such benefits have convinced a 
small but growing number of compa- 
nies to implement federated identity 
management systems. 

@ Harvard Pilgrim Health Care Inc. 
is using a federated identity model to 
present members with claims informa- 
tion from a partner site. The health 
care organization has deployed tech- 
nology from Waltham, Mass.-based 
Netegrity Inc. that allows it to take a 
member’s identity information and 
assert it on the claims presentation 
partner’s Web site. The ability to deliv- 
er such access via a federated portal is 
a crucial competitive advantage, says 
Ken Patterson, information security of- 
ficer at Wellesley, Mass.-based HPHC. 

@ For the U.S. Navy, identity federa- 
tion is a core enabler in a massive ID 
management project designed to make 
it easier for over 800,000 ship- and 
land-based naval personnel to access 
thousands of scattered applications us- 
ing a single sign-on. When complete, 
the system will allow a sailor or ma- 
rine to use a single, unique Naval Net- 
work Identity to access scores of appli- 
cations and network services. Previ- 
ously, users had to maintain dozens of 
usernames and passwords to access 
these different resources, says Terry 
Howell, enterprise services lead at 
the program executive office for the 
Navy’s Command, Control, Communi- 
cations, Computers and Intelligence 
project at the Space and Naval Warfare 
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systems center in San Diego. Cuperti- 
no, Calif.-based Oblix Inc. is providing 
the Navy with the federated SAML au- 
thentication technology that is needed 
to assert identities across domains. 

®@ Southwest Airlines Co. has de- 
ployed Oblix’s NetPoint access control 
and ID management technology to 
broker access to Southwest’s external 
business partners. In one example, 
Southwest is using the SAML-enabled 
identity management system to vouch 
for the identity of employees accessing 
repair manuals that are hosted on The 
Boeing Co.’s systems. 


Slowly Gaining Traction 
Though adoption of the federated 
model is growing, the number of im- 
plementations so far is still relatively 
small, Blum says. “We estimate there’s 


| between 200 to 300 deployments of 


federated identity today,” he says. “The 
greatest interest is in the financial ser- 
vices sector, with significant interest 
also in manufacturing, government 
and telecommunications.” 

Most of the activity has been in large 
companies that are using identity fed- 
eration to link networks with sub- 
sidiaries, widely dispersed internal 
business units and partners with whom 
they have trusted relationships, says 
Venkat Raghavan, security manager of 
IBM’s Tivoli Software business unit. 

Raghavan sees the growing use of 
mobile technologies and the attempt 
by wireless providers to deliver more 
services to handhelds as another dri- 
ver of identity federation. Being able 
to use next-generation mobile devices 
to pay multiple bills or access peer-to- 
peer applications will require identity 
federation to play a big role, he says. 

Despite the growing interest, there 
are several formidable challenges that 
companies need to consider when 
thinking about deploying federated 
identity systems, he says. 

The biggest by far is trust, Raghavan 
says. Partners in a federated system are 
essentially vouching for the identity of 
their users and their need to have ac- 
cess to services on another network. 

Before a federated system can be set 
up, many issues must be sorted out re- 
lating to the roles, privileges and ac- 
cess rights for individuals on partner 
networks. There also needs to be a 
high level of assurance around the pro- 
cedures and policies that federated 
partners employ for authenticating 
users and assigning roles to them. 

“There is no warm, fuzzy feeling 
around the validation of an individual 
whose account you have no control 
over,” says HPHC’s Patterson. “We are 





dealing with the most sensitive med- 
ical information. We want to have the 
highest level of assurance around the 
identity of our users,” he says. 

“It is really difficult to trust a net- 
work outside of what you control,” says 
the Navy’s Howell. “The negative con- 
sequences of an [identity-related secu- 
rity breach] could be quite drastic.” 

As a result, identity federation 
works best where the business model 
is built on interaction between differ- 
ent companies and domains, says Rick 
Caccia, director of product manage- 
ment at Oblix. When legal and trust 
processes are already in place, cross- 
domain user authentication becomes 
easier to accept, Caccia says. 

Interoperability is another key issue, 
since identity federation involves the 
exchange of security information 
across different domains and servers. 
The most widely used standard for 
doing this today is SAML. Another 
standard is the Liberty Alliance Proj- 
ect’s Identity Federation Framework. 
Both standards specify the manner in 
which organizations package and en- 
crypt the identity information they 
share with one another. 








www.computerworld.com 


STANDARDS SHUFFLE 


But different versions of the specifi- 
cations, and the ways in which vendors 
of federated identity management 
products have chosen to implement 
these standards, can create interoper- 
ability problems, Blum says. 

Organizations that are embarking on 
identity federation projects also need 
to figure out a way to bring partners 
on board, says RSA’s Lewis. Unless you 
make it as easy and cost-effective as 
possible, there is little incentive for 
partners — especially the smaller ones 
— to link into a federated identity sys- 
tem, he says. 

At the end of the day, federation just 
makes cross-organizational access eas- 
ier, Raghavan says. For example, an 
employee who previously needed to 
separately log in and authenticate him- 
self on his 401(k) provider’s site might 
no longer need to do so if he’s already 
logged in on his employer’s human re- 
sources site. 

But federated identity doesn’t enable 
new access where none existed before, 
Raghavan says. Therefore, it becomes 
crucial to have a clear understanding 
of the specific cost, access and security 
value it can deliver, he says. @ 49695 





Xerox WorkCentre’ Pro advanced multifunction systems 
not only print up to 3x faster than competition. They’re even 
smart enough to give your productivity a colorful new twist. 

There’s a new way to look at it. 


The advanced thinking built into the Xerox 
WorkCentre® Pro family makes them the 
smartest multifunction citizens working on 
any network. They don’t just scan, copy, fax, and 
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up to 3x faster than competition. They RIP one 
job while printing another, so work gets done 
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THE DOCUMENT COMPANY 


Learn more: xerox.com/office/244 For a sales rep: 1-800-ASK-XEROX ext. 244 xX | RR OX 
© 2004 XEROX CORPORATION. All rights reserved. XEROX,* The Document Company® WorkCentre® and There's a new way to look at it are trademarks of XEROX CORPORATION £ 





28 COMPUTERWORLD Octeber 11, 2004 








Web-enabled application 
delivery appliances combine 
several technologies to en- 
sure fast, secure and reliable 
access to Web applications. 


BY MATT 


HARTONE INC. had invested 
heavily in a new Web- 
enabled application, only to 
discover that it reached end 
users too slowly. “We were 
having challenges running 
PeopleSoft efficiently,” says Henry 
Svendblad, director of IT and informa- 
tion systems at the San Jose-based 
company, which provides technology 
services to health care institutions. 
“The advice from vendors and 
integrators was to tune the application 
or the database or add more server 
hardware,” Svendblad says. But he 
tried a different approach, spending 
$100,000 on four E|X 3250 Enterprise 
Application Processor appliances 


HAMBLEN 


from Campbell, Calif.-based Redline 
Networks Inc. 

By taking advantage of features such 
as traffic compression, load balancing, 
session management and TCP opti- 
mization capabilities available in the 
devices, Svendblad says ChartOne has 
improved the performance of People- 
Soft and all of its other Web applica- 
tions as well. “We see on average a 70% 
reduction in bandwidth. It makes a 
night-and-day difference in the way ap- 
plications go, from being very slow to 
| snappy and very responsive,” he says. 


All in One 


Vendors have traditionally offered an 
array of products — from Secure Sock- 
ets Layer (SSL) acceleration appliances 
to Web server load balancers — to en- 
sure fast, reliable and secure delivery 
of Web-based applications. With prod- 
ucts such as the E|X 3250, those tech- 
nologies are beginning to converge 
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into consolidated offerings. A half- 
billion-dollar market has emerged 
for products from more than a dozen 
vendors that integrate, usually in a 
single switchlike appliance, a range 
of functions designed to improve the 
speed and security of Web-enabled 
applications. 

The products, variously referred to 
as Web-enabled application delivery, 
Layers 4-7 switching or application 
front-end appliances, may support a 
variety of functions. Among them are 
SSL encryption and acceleration, com- 
pression, load balancing, route opti- 
mization and control, XML optimiza- 
tion, attack-signature filtering, TCP 
offloading and optimization, and appli- 
cation performance optimization. The 
core functions most large businesses 
want are compression, TCP optimiza- 
tion and offloading, and SSL accelera- 
tion, says Lynn Nye, an analyst at APM 
Advisors in Portland, Ore. 

IT organizations say they’re attract- 
ed to consolidated devices because 
they require less data center space, 
lessen setup and management head- 
aches and save money by reducing the 
need to add hardware and bandwidth. 

The leading players in this niche are 
smaller companies, says Mark Fabbi, 
an analyst at Gartner Inc. In contrast, 
major network switch vendors such as 
Cisco Systems Inc., Nortel Networks 
Ltd. and Foundry Networks Inc. offer 
load balancing, but they’ve mostly 
omitted the other optimization features 
needed to ensure speedy Web applica- 
tion delivery. “The big guys don’t get 
it,” Fabbi says. 

Yet the need for such products is real. 
“Companies spend a lot of money on 
expensive applications and find the net- 
work performance is lacking,” he says. 
“You can spend $10 million for a criti- 
cal application, and the performance to 
remote users doesn’t work well.” 


Gradual Rollout 


ChartOne’s main goal in using the E/X 
3250 was to reduce bandwidth by using 
its compression capabilities, but 
Svendblad decided to use several other 
features as well. ChartOne’s experi- 
ence is similar to that of other users 
interviewed for this story, all of whom 
say their primary concern was to im- 
prove performance. 

“Typically, customers buy the appli- 
ance for one function and turn on oth- 


er functions as time goes on,” says Nye. 


UBid Inc., an online auction provider 
in Chicago, started using the NetScaler 
9000, an appliance from NetScaler Inc. 
in San Jose, last March. It deployed 
the device to provide load balancing 








across the company’s Web servers but 
quickly deployed other features, says 
Mano Sivashanmugam, vice president 
of technology. 

UBid’s Web site allows simultaneous 
bids from hundreds of users but pre- 
vents them from seeing the final bid 
price to protect retailers. Some users, 
however, had written scripts to 
discover the final price, he says. The 
NetScaler appliance prevents such 
scripting attacks from succeeding. 

UBid had 30 Web servers before 
installing NetScaler, but by using its 
load-balancing features, UBid was able 
to reduce that to just eight. Sivashan- 
mugam bought two appliances for 
about $60,000 but says he has saved up 


While more than a dozen vendors sell 
Web-enabled application delivery 
products today, five lead the market 
and two are at the top of the pack, 
says Gartner analyst Mark Fabbi. 

F5 recently announced the Traffic 
Management operating system for its 
Big-IP appliances and has added “rate 
shaping,” which ensures that bandwidth 
is available for high-priority applications. 
Caching isn't yet available. 

Radware offers its products in 
appliances such as its LinkProof load 
balancer and FireProof firewall load 
balancer. It also offers attack signature 
filtering and the LinkProof Branch 
product to extend control beyond 





| down. ... We’ve seen most big [ven- 


dors] take too long to understand that,” 
he says. 

For Kentucky, load balancing is a key 
function of four application switches 
running Big-IP software from F5 Net- 
works Inc. in Seattle. But the state gov- 
ernment also uses the switches in its 
four data centers to monitor traffic and 
the health of connections to 45 Web 
sites, says Rajesh Bhabaraju, a consul- 
tant at Analysts International Corp. in 
Minneapolis and a Web administrator 
for the state. Kentucky also uses Big-IP 
to create SSL proxies, so it doesn’t 
need to purchase a separate SSL prod- 
uct from another vendor. The system 
has been in place for about 18 months 


the data center. 

Fabbi puts Inkra Networks, 
NetScaler and Redline Networks 
in the next tier. The three offer similar 
features. Inkra has moved beyond 
its focus on service providers to the 
enterprise with its Inkra 1500 Virtual 
Service Switch, he says. The remaining 
vendors include niche players, Fabbi 
says. Array Networks Inc. is notable for 
its memory-based caching; FineGround 
Networks Inc. and Pivia Inc. have 
complementary products that provide 
application optimization; and Nauticus 
Networks Inc. has strong SSL and 
traffic management capabilities. 

- Matt Hamblen 


to $80,000 on new hardware he didn’t 
have to buy, as well as up to $10,000 per 
month for additional electrical power 
and bandwidth that won’t be needed. 

“My cost of ownership is less, host- 
ing is less, power is less, and band- 
width is a lot less,” Sivashanmugam 
says. In all, bandwidth needs have 
dropped from 35Mbit/sec. to 1I7Mbit/ 
sec., he estimates. 

NetScaler’s SSL acceleration capabil- 
ity also has made UBid more efficient, 
Sivashanmugam explains. SSL puts a 
strain on Web servers. As a result of 
offloading encryption and decryption 
tasks to the NetScaler appliance, the 
Web server request queue is much 
smaller — about one-tenth what it 
once was. 

Sivashanmugam says he likes the idea 
of using a single product that handles 
all aspects of application performance. 





and has helped reduce support hours 
and costs “drastically,” says Bhabaraju. 

“Big-IP primarily provides reliabili- 
ty,” says Bhabaraju. Putting all the fea- 
tures together with a variety of ven- 
dors might have been too complex and 
wouldn’t ensure ease of management 
or interoperability, he says. 


Thinking Out of the Box 


While vendors offer a variety of secu- 
rity and performance options from one 
source, the products aren’t always in 
one box. LifeWay Christian Resources 
of the Southern Baptist Convention in 
Nashville uses two devices from Rad- 
ware Inc. in Mahwah, N]J. 

LifeWay, which operates 18 retail 
stores and provides online Bible study 
and other online Christian resources, 
installed Radware’s LinkProof load 
balancer and FireProof firewall load- 


“If anything goes down, our business is | balancing products. 





David Elliott, systems engineer at 
the nonprofit, says that when a new 
online curriculum was introduced, 
bandwidth use surged 35%, but Link- 


| Proof handled the load without adding 
| bandwidth. Prior to LinkProof’s 


launch, bandwidth had been sluggish 
across three T]1 lines, Elliott says. “In 
that first immediate use of Radware, it 
got us out of the hole,” he says. 

Using the separate boxes, which cost 
about $60,000, hasn’t been a problem, 
but the implementation of such prod- 


| ucts can be complex, Elliott warns. “It’s 


pretty involved, and I was surprised at 
the level of technical knowledge that 
your engineers need to have,” he says. 
While many companies use just a few 
features today, some are taking maxi- 
mum advantage of consolidated prod- 
ucts. Savvis Communications Corp. in 
St. Louis is making full use of all of the 
features available in the 30 Virtual Ser- 
vice Switches it purchased from Inkra 
Networks Corp. in Fremont, Calif. 
Savvis operates application infra- 
structure for other companies and uses 
Virtual Service Switches in 25 data 
centers to offer customers SSL acceler- 
ation, load balancing, firewall protec- 
tion, intrusion detection and IPsec vir- 
tual private network tunnel termina- 
tion, says CEO Rob McCormick. He 


| says each switch costs $200,000. 


With this approach, Savvis can use 


one switch to serve multiple customers, 


although some still prefer to have sep- 
arate products for each function tied 
directly to their servers. McCormick 
estimates that he can replace the need 
for 1,200 Ethernet ports to various Web 
servers with one Inkra switch filling 
half a rack for a significant savings in 
space. 

McCormick passes on the savings 


| from using a consolidated appliance 


to customers. For example, Savvis 
charges customers about $1,500 per 
month for a dedicated, managed fire- 
wall but charges just $250 per month if 
the customer uses the managed firewall 
in its Virtual Service Switch product. 
“Inkra is the only vendor I’ve found 
to pull all the functions we need intoa 
single product,” McCormick says. But 
as the market matures, other vendors 
will offer more application delivery fea- 


| tures in their appliances. And that’s 
| something that both Savvis and other 


corporate IT organizations are bound 
to want, says Fabbi. @ 49489 


PLAYING CATCH-UP 


Larger vendor offerings still lack key features for Web- 
enabled application delivery: 
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Nanograss 


Adaptable substance may cool computers and put 
azoomlens in your cell phone. By Gary H. Anthes 





drop of water glides across 
the flat surface like quick- 
silver, moving effortlessly 
from place to place as the 
surface is tilted. It’s hard to 
believe that the little bead is water, for 
it doesn’t wet the surface as it races 
around, seemingly without friction. 
The little drop in this impromptu 
laboratory demonstration isn’t 
on an ordinary surface. It’s rid- 
ing on “nanograss,” a bed of 
upright silicon posts a thou- 
sand times thinner than a hu- 


FUTURE 
WATCH 


| New Jersey Nanotechnology Consor- 
tium (NJNC). 

“Nanograss is a whole new class of 
structure, where we are nanoengineer- 
ing the surface of a material,” says 
David Bishop, a research vice president 
at Bell Labs and president of the NJNC. 
“By adjusting the area of these posts 
and their density, and how you pattern 

them, you can engineer how the 
fluid interacts with the sub- 
strate. So you are not stuck with 
what nature gave you, and you 
can do lots of amazing things.” 


man hair. Bell Labs, the research and It is also possible to alter the proper- 
development arm of Lucent Technol- ties of nanograss on the fly by chang- 


ogies Inc., is betting that nanograss 
will find its way into commercial prod- 
ucts ranging from low-friction boat 
hulls to heat sinks for computer proc- 
essors and batteries with a shelf life of 
25 years. It will be one of the first 
nanoscale technologies commercial- 
ized by Bell Labs and its partner, the 


ing the temperature, applying ultra- 
sound or a small voltage, or other 
means. A voltage builds up an electri- 
cal field at the tips of the nanograss, 
and that changes its wettability 
through an effect called electrowetting. 
That could allow the electrodes and 
electrolytes in a battery to remain sep- 





arated until the battery is needed, ex- 
tending its shelf life indefinitely. Con- 
ventional batteries discharge at the 
rate of 3% to 5% a month, even when 
not in use. Nanograss batteries will 
cost less and have far higher power-to- 
weight ratios, researchers predict. 

Bishop says other applications of 
nanograss include the following: 

@ Heat sinks for computer processors 
and other devices. “It’s very hard to get 
high fluid flows through small silicon 
channels; it kind of jams up,” Bishop 
says. “But nanograss allows much 
higher fluid flow because the liquid is 
only interacting with one-hundredth 
as much surface.” 

Commercialization of the nanograss 
heat-sink idea is two to three years 
away, but Bell Labs is about to sign a 
contract with a company to develop a 
“smart” heat sink that can change its 
cooling properties as needs change, 
he says. The idea is noteworthy be- 
cause chip makers have found that 
heat dissipation is one of the greatest 
obstacles to making silicon circuits 
smaller than the current generation, 
at 90 nanometers. 

® Liquid lenses. It’s possible to con- 
struct tiny, cheap liquid lenses whose 
focal lengths and other properties can 
be changed very quickly by the appli- 
cation of electrical fields. Bishop pre- 
dicts that disposable cameras and cell 
phones with zoom lenses based on this 
idea could be available in a year. 

@ “Liquid photonics.” In three to five 
years, nanograss might also go into 
switches, power splitters, filters, multi- 
plexers and other devices in order to 
manipulate light in ways that are diffi- 
cult to do by conventional means. 

“Nanograss is an important technol- 
ogy because it combines a materials 
breakthrough with electronic proper- 
ties that enhance the material and allow 
it to be used as a platform for a slew of 
applications,” says Josh Wolfe, a manag- 
ing partner at Lux Capital Group LLC, a 
venture capital firm in New York. 

Wolfe says such “hybridization of 
disciplines” is a defining characteristic 
of many nanotech applications, and it 
allows for advancements that would 
have been impossible in a world where 
scientists generally concentrated on 
just one field at a time. 

MPhase Technologies Inc. in Nor- 
walk, Conn., is working with Bell Labs 
and the NJNC at Bell Labs’ $400 mil- 
lion “nanofabrication laboratory” in 
Murray Hill, NJ., to develop nanotech 
batteries. The parties will share any 
patents that result. MPhase will pro- 
duce some batteries itself and will li- 
cense the technology to other battery 








www.computerworld.com 


makers, says Steve Simon, the compa- 
ny’s executive vice president for R&D. 

MPhase will make conventional 
nonrechargeable batteries and “re- 
served” batteries — those that don’t 
combine the electrolyte and electrodes 
until the battery is needed, Simon says. 
The batteries will be used in military 
applications in 2006 and in commer- 
cial devices, such as cell phones, hand- 
held devices and notebook computers, 
in about three years. Preliminary 
benchmark data from mPhase shows 
that the batteries will have three to 
four times the power-to-weight ratio 
of ordinary AA batteries. @ 49480 


istry and biology all intersect at the nano- 
scale, and all have gotten there simulta- 
neously,” he says. 

“Nanotech is about bringing engineer- 
ing precision and discipline to a world 
where we know lots of interesting things 
happen at the nanoscale, rather than wait 
5 billion years for something to evolve,” 
he adds. 

Lucent Technologies in 2003 estab- 
lished the New Jersey Nanotechnology 
Consortium, a regional partnership of Bell 
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Security Review Uncovers 
Rampant Virus Infections 


Our new journal writer makes a most 
unpleasant discovery just as the IT 
auditors arrive. By C.J. Kelly 


HEN the call came, 

I wasn’t surprised. 

The voice at the 

other end of the 
line said, “Our network securi- 
ty analysis tool has found 
something we call ‘suspicion 
indicators’ on your network. I 
think you need to look at this 
right away.” I had a sick feeling 
as my mind raced to the con- 
versations I would soon be 
having with senior manage- 
ment. I tried to focus on the 
conversation at hand. 

After several years 
of network security 
consulting in health 
care, financial ser- 
vices and high-tech 
companies, I had 
accepted a full-time 
position at a not-so-high-tech 
company, thinking it would be 
an easy, kick-back kind of job 
with a regular paycheck. 

In the short time I’ve been 
here, I’ve realized that I traded 
one set of problems for anoth- 
er. Before, I could point out 
all the security issues to my 
clients and get paid for that — 
and require additional large 
sums of money for the follow- 
on remediation work. But now, 
I’m on the other end of the 
equation. I am now responsi- 
ble for the network, and the se- 
curity consultants are pointing 
out all the problems to me. 
What was I thinking? 

The caller was with an out- 
side network security compa- 
ny we had brought in to do a 
high-level security assess- 
ment. I had hired this firm un- 
der the constraints of a small 
budget and tight timeline, and 
with the internal and external 
IT auditors one week away 
from walking in the door, a 
quick decision was needed. 

The security assessment 
vendors we had used in the 
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past had primarily focused 

on access-control issues and 
known vulnerabilities — the 
usual fare. This time, I wanted 
consultants who were more 
advanced and experienced 
than our staff. 

I had interviewed a number 
of consulting firms and was 
becoming a little desperate. 
When I asked the team if they 
knew of anyone, I was intro- 
duced to a company that had 
developed a proprietary tool 

- that incorporated 
many of the open- 
source tools we use. 
I was impressed 
by its functionality 
and said, “This is 
like ArcSight on 
steroids!” The lead 
security consultant’s résumé 
read like a who’s who of the 
scientific world. He was in- 
volved in the Internet before 
it was ever called that. And 
to top it off, he was the most 
unassuming and interesting 
person I had ever met. I hired 
his firm, and we got started 
right away. 

Within days of data collec- 
tion and analysis, the consul- 
tants had discovered hundreds 
of thousands of suspicious 
connections to sites all over 
the world, many of which 
were very undesirable. Using 
their reports, I typed ina 
Google search string that in- 
cluded the port numbers and 


January through April, 
we had no virus out- 
breaks. In May, some- 
thing went boink. 





country names. The informa- 
tion I found pointed to back- 
door Trojan horses associated 


| with a number of viruses. 


These Trojans horses had to 
be the culprit for the mysteri- 
ous connections. 

I tracked down my boss and 
explained the findings, my 
theory of virus/Trojan activity 
and my plan of attack. I also 
told her that I couldn’t say 
whether our network had 
been compromised but that 
I would keep her updated. 

We discussed whether we 
should take this information 
to the C level or do more re- 
search. Realizing the legal im- 
plications of a network com- 
promise, we decided that we 


| needed more information be- 


fore communicating upward. 
My lead security engineer was 
on vacation, so I got to work. 


Ports of Call 


I had to determine which 
connections were valid. A 
review of outbound firewall 
rules confirmed that they 
were appropriately limiting. 

I put together a spreadsheet 
comparing the firewall rules 
with known backdoor Trojans 
that operate on our allowable 
ports. At least I had narrowed 
the list of Trojans to look for. I 
decided to focus immediately 
on Ports 80 (HTTP) and 25 
(SMTP), since they are the 
most widely exploited. 

We use Web filtering tech- 
nology and have a robust anti- 
virus program, so I couldn’t 
understand what was going 
on. Then I found that most of 
the suspicious activity was on 
a network segment that wasn’t 
being filtered, which means 
malicious Web sites weren't 
being blocked. Great. I asked 
the network architect if we 
could deploy our Web filtering 
technology to that segment. 
His answer: We needed two 
more routers, and it would 
take weeks to get the equip- 
ment in place. Roadblock. 





The next step was to identi- 
fy and inspect the systems 
from whence the connec- 
tions were originating, but the 
DHCP logs were basically use- 
less. Another roadblock. 

I logged onto the central 
antivirus control manager. It 
was reporting that hundreds 
of systems were infected! I ran 
month-to-month reports be- 


| ginning in January to see if 


there was a pattern. Sure 
enough, January through 
April, we had no virus out- 
breaks. In May, something 
went boink. From May 
through the present, the con- 
trol manager was reporting a 
long list of viruses active on 
our network, many of which 
installed backdoor Trojans. 
This was not a good sign. I 
asked the data center opera- 
tions manager for his help. 

Our antivirus vendor con- 
firmed that in May the anti- 
virus services went down 
on the primary e-mail server 
because of file corruption. It 
took days to get the system 
back. During that time, an 
unknown number of e-mail- 
borne viruses came into our 
network. Many of those, 
though detected, couldn’t be 
quarantined. The cleanup will 
require manual effort and re- 
sources. Time to involve up- 
per management. 

I have had quite the head- 
ache in the past few weeks, 
but the good news is that the 
unsavory results of the securi- 
ty assessment have allowed us 
to identify a number of things 
that need to be fixed and to 
justify a budget for better 
tools, additional head count 
and possibly an organizational 
adjustment. The consultants 
recommended that informa- 
tion security be given visibili- 
ty at the C level, as in CSO. 
But for me, it’s back to the salt 
mines. I will be spearheading 
a virus cleanup effort. D 


WHAT DO YOU THINK? 


This week's journal is written by a real secu- 
rity manager, “C.J. Kelly,” whose name 
and employer have been disguised for 
obvious reasons. Contact her at mscjkelly@ 
yahoo. com, or join the discussion in our 
forum: QuickLink a1590 
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SECURITY LOG 


New Tool Helps 
Authenticate PDFs 
Adobe Systems Inc. and Geo- 
Trust Inc. announced the Cer- 
tified Document Service, de- 
signed to verify and authenti- 
cate the identity of senders 
of Adobe PDF files. With Geo- 
Trust's True Credentials digital 
signing technology, users can 
create “trusted electronic 
documents” that organiza- 


from a wide range of devices, 
including PDAs. A new “adap- 
tive policy engine” allows for 
better management and more 
granular access control, F5 
said. Pricing starts at $2,490 
for 100 concurrent users. 


Easier SSO Rollout 


M-Tech Information Technol- 
ogy Inc. has integrated its 
P-Synch password manage- 
ment tool and Citrix Systems 
Inc.’s MetaFrame Password 
Manager. New capabilities in- 
clude self-service password 
reset for forgotten or expired 
passwords, which M-Tech said 
can help reduce password- 
related calls to help desks by 
85%. M-Tech also said the in- 
tegrated product can let orga- 
nizations deploy a single sign- 
on system without first acquir- 
ing current user log-ins and 
passwords. 
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Attensity Suite for 
Unstructured Data 


® Attensity Corp. in Palo Alto, 
Calif., announced the Attensity 
Application Suite. It is based on 
Attensity Server, which extracts 
relational facts, entities and 
events from text-based informa- 
tion. The suite is available in ver- 
sions tailored to individual verti- 
cal industries using Attensity 
Knowledge Libraries. Available 
now, Attensity Application Suite 
starts at $50,000. 


Force10 Launches 
New Switch Line 


@ Force10 Networks Inc. in Milpi- 
tas, Calif., last month introduced 
the TeraScale E-Series family 

of switches. The new switches 
deliver 672 line-rate Gigabit Eth- 
ernet ports and 56 line-rate 10 
Gigabit Ethernet ports in a single 
chassis, according to Force10. 
The four-port 10 Gigabit Ethernet 
LAN/WAN line card, available 
now, sells for $48,000. 


SAS Announces 
Forecasting App 


@ SAS Institute Inc. has an- 
nounced the High-Performance 
Forecasting application. The tool 
is designed to automate predictive | 
analysis operations and make | 
them more accessible to nontech- | 
nical users. It is expected to be 
particularly useful in industries 
such as retail, where sales are af- 
fected by seasonal variables, ac- 
cording to Cary, N.C.-based SAS. 
Pricing starts at $50,000. 


Movaris Upgrades 
Sarb-0x Suite 


® Movaris Inc. in Cupertino, Calif., 
has introduced Certainty 8.0, a 
modular suite of its software for 
managing finances according to 
requirements of the Sarbanes- 
Oxley Act. New functionality in- 
cludes tools for ensuring compli- 
ance with Sections 404 and 302, 
according to Movaris. Certainty 
8.0 runs on SQL Server, IBM DB2 
and Oracle database systems. 
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the 


Candidate for IT 


HICH U.S. PRESIDENTIAL candidate 


is most in tune with issues of partic- | 


ular interest to IT professionals? 
On many subjects, the two major 
candidates, and their parties, are 
pretty equivalent. Both George Bush and John Kerry 
support federally subsidized universal broadband ac- 
cess, extension of the R&D tax credit, education pro- 


grams in science and tech- 
nology, and restraint on In- 
ternet taxation. Both Repub- 
licans and Democrats have a 
long track record of support- 
ing a high-tech military, al- 
though Republicans some- 
times overspend a bit (e.g., 
the “Star Wars” and artificial 
intelligence boondoggles of 
the 1980s), while Democrats 
may spend too little. 
But on some issues of 
particular interest to IT pro- 
fessionals, there is real sep- 
aration between the two candidates: 
Benefits for self-employed workers. Many 
IT workers are or may soon become 
“consultants.” Health insurance options 
for self-employed workers can be pretty 
grim. One major differentiator between 
the two candidates is Kerry’s vow to pro- 
vide self-employed workers with access 
to “the same affordable coverage policies 
that members of Congress get today,” via 
an extension of the Federal Employees 
Health Benefits Program. Maybe he can 
deliver that, and maybe he can’t. But ei- 
ther way, Kerry can at least be expected 
to make a major assault on the problem 
of health coverage for those households 
in which nobody is employed by a sizable 
enterprise. Bush expresses no similar in- 
tention, except for “medical savings ac- 
counts” — and those are supplements to 
health insurance, not replacements for it. 
Offshore competition. A president can’t 
stop the flow of IT jobs overseas, but he 
can probably slow it down. Kerry has 
vowed to do what he can about the 





outflow of jobs, while Bush’s 
approach is wholly laissez 
faire. 
Tax breaks for start-ups. Be- 
yond the R&D tax credit, 
Bush favors tax breaks for 
dividend-paying corpora- 
tions, while Kerry favors tax 
breaks for start-ups. Start- 
ups produce new technol- 
ogy, and new IT usually 
leads to new or better jobs. 
Internet freedom. We used 
to believe that the Internet 
would simply route around 
censorship. But the examples of China 
and Vietnam show that government con- 
tent control is a genuine danger to the 
Internet. The Bush administration’s ob- 
session with the menace of exposed 
flesh seems like the first step on the slip- 
pery slope of censorship. 

Also crucial to the evolution of the In- 
ternet is personal data privacy. Home- 
land security, electronic medical records 
and even advanced CRM all depend on 
tremendous amounts of data integration. 
But unlimited nationwide data integra- 
tion is — and probably should be — po- 
litically impractical, unless it’s accompa- 
nied by strong data privacy safeguards. 
The costs of these safeguards should be 
manageable, since data privacy require- 
ments in other countries will mean that 
the relevant software and systems must 
be developed anyway. 

The USA Patriot Act, which Bush 
proposed and Kerry voted for, is a major 
assault on data privacy. Even so, Kerry 
distinguishes himself from Bush in this 





area. He has sponsored admirable data 
privacy legislation in the past (in part- 

nership with Republican Sen. John Mc- 
Cain) and promises more in the future. 

Some important IT-related issues 
aren’t being addressed by either candi- 
date. Federal computer systems procure- 
ment is a major fiasco, leaving us with an 
air traffic control system mired in the 
1970s and an FBI intranet that lacks an 
effective search capability. Neither can- 
didate has made a peep on the subject. 

Electronic health records will be a 
huge savior of lives and costs, assuming 
that there are proper provisions for pri- 
vacy and security. But while both candi- 
dates have expressed support for the 
idea, neither has offered a concrete plan 
for making it happen. 

Even so, on the IT-specific issues 
where the candidates do have positions, 
Kerry has a clear advantage over Bush. 
And his advantage in science and tech- 
nology extends beyond IT. Dozens of 
Nobel laureates support Kerry over Bush 
because of his stated commitment to sol- 
id science-based policymaking. 

Most voters will probably place other 
issues ahead of purely IT-related ones. 
Iraq, terrorism, loose nukes, nuclear pro- 
liferation, abortion and AIDS prevention 
are all life-and-death matters. Potential 
Supreme Court vacancies will be hugely 
important. So, too, are fiscal and eco- 
nomic questions: Should tax cuts be 
funded by government borrowing? Is 
Bush responsible for his Hooveresque 
record of deficits and job losses, or can it 
be explained away by 9/1l and the col- 
lapse of the tech bubble? 

But to the extent that you’re voting 
from an IT perspective, John Kerry is 
the best candidate. @ 49820 
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Sound off: Agree? Disagree? Think the author 
is a right-wing loony or a leftist stooge? Visit our 
forum on government issues in IT and weigh in: 
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Want our opinion? For more columns and 
links to our archives, go to 
www.computerworld.com/opinions 
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ranges from e-mail to inau- 
gurations — all on the na- 


CFOs of IT face an uphill 
course in their efforts 
= to measure and quantify 
the often intangible 
a benefits of technology. 
fm By Thomas Hoffman 


IKE SCARDINA has been the chief financial 
officer for IT at Allstate Insurance Co. for 
nearly 10 years. But it’s only in the past 
few years that the spotlight on his role 
has intensified. Allstate’s annual technol- 
ogy spending has swelled to more than 
$1 billion a year, and Scardina has come 
under enormous pressure from senior management 
to help cost-justify the Northbrook, Ill.-based insur- 
er’s technology investments. 

“It’s not enough to say we’re going to spend $150 mil- 
lion on a data center. People will ask, ‘Well, yeah, but 
why $150 million and not $75 million?’ ”” he says. 

As IT spending has soared to half of all capital ex- 
penditures at many companies, so-called CFOs of IT 
are being required by top brass to provide greater 
clarity and transparency around those investments. 

“T define my role this way: to determine and ex- 
plain to senior management what AIG is spending 
on IT and to provide reasonable assurance that 
expectations are being met,” says Joseph Barkley, 
CFO at AIG Technology Management Services, 
the IT services arm of New York-based insurance 
giant American International Group Inc. 





“Legacy finance systems aren't well suited to keeping track of {T 
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Changing Roles 

Indeed, the roles for CFOs of IT have changed. “The 
scope of my role has expanded well beyond manag- 
ing and controlling IT budgets since 2002,” says 
Grant Zaichick, head of IS controlling for the Ameri- 
cas at DHL Information Services (Americas) Inc., the 
Scottsdale, Ariz.-based IT services arm of trans- 
portation and logistics provider DHL International 
Ltd. In addition to overseeing IT accounting and 
budgeting, Zaichick has recently taken on responsi- 
bility for global IT reporting and IT contracts and as- 
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set management for the Americas region. 
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The IT CFO’s position “is changing from a custo- 
dial/tactical role to more of a strategic role,” says 
Howard Rubin, executive vice president at Stamford, 
Conn.-based Meta Group Inc. “They’re in the nexus 
of negotiations.” 

Simply put, being a CFO of IT “is a real tough job,” 
says Bill Johnston, president of Alinean LLC, a consult- 
ing firm in Orlando. There are several reasons for this. 

For starters, it’s still a universal challenge — even 
for financial wizards — to effectively measure and 
quantify the impact that technology investments are 
having on profits or operational efficiency. Add to that 
the dearth of tools available to attempt those measure- 
ments. Finally, throw in the complexities of develop- 
ing a standardized approach to valuing IT investments 
across multiple business divisions or regions, and it’s 
a wonder that IT controllers can do their jobs at all. 


Unaccountable 

Measuring the quantifiable impact of IT investments 
is a big challenge for all types of companies, even 
those with world-class IT practices such as Intel 
Corp. Showing the link between IT spending and the 
benefits accrued is the “key issue that nearly every 
IT organization faces,” says Intel CIO Doug Busch. 

Sure, Intel has continually refined its IT funding 
model. And it’s had a finance manager in at least one 
of its IT organizations since 1994, including Theresa 
Kelly, who took over as CFO for the company’s newly 
consolidated IT department a few months ago, says 
Busch. Intel has also taken advantage of IT portfolio 
management and other measurement techniques to 
help its IT organization identify the link between IT 
and more than $1 billion in bottom-line improve- 
ments to the company between 2000 and early 2004, 
says Busch. 

But he’ll also tell you that Intel is having as much 
trouble as any company getting its accounting sys- 
tems to assimilate IT-related finances into its core 
accounting practices. 

Allstate’s Scardina understands. “Legacy finance 
systems aren’t well suited to keeping track of IT in- 
vestments, particularly at the kind of granular level 
that we feel we need in order to provide the clarity of 
spend,” he says. For instance, standard accounting 
systems don’t provide Allstate’s IT finance profes- 
sionals with the ability to track the number of desk- 
tops in use across the organization or processor pow- 
er in use per IT dollar spent, notes Scardina. 

Allstate does use IT asset management software to 
help it track hardware and software systems. But the 
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WHO ARE THESE GUYS? 


CFOs of IT are the finance people who oversee the 
business of running an IT department or services 
unit at a company. Although their responsibilities 
vary from company to company, their duties include 
oversight of IT budgets, IT procurement, asset 
management, cost analysis and benchmarking IT 
competencies against those of competitors and 

OU mO AT ee UCM (ts) Ol OMe) mM Ccl leg COR CL) 
ClO, but some have dotted-line reporting to the 
corporate CFO. 

Pee emeee UPTO MEM iC ltt) e) (om 
these roles for more than 20 years, the position has 
become increasingly popular since the economy 
started to soften in mid-2000 and senior manage- 
Ue te COR eV ee en PAcM Pes eclieire mest |B 
less than 10% of U.S. companies have someone 
who’s formally in an IT finance role, says Bill Johns- 
ton, president of consulting firm Alinean. 

‘ - Thomas Hoffman 


insurer’s accounting software goes only so far in pro- 
viding Scardina and his staff with the kind of finan- 
cial information on IT investments that they need. 

“From a corporate standpoint, you want to have 
one set of financial records to report on,” Scardina 
says. “But from an IT standpoint, [accounting sys- 
tems] don’t have all the data you need.” 

To help resolve those kinds of issues, AIG has de- 
veloped common financial reporting processes and 
software templates to collect IT-related financial 
data across its worldwide operations and feed it into 
the company’s Hyperion Solutions Corp. accounting 


| system, says Barkley. 


But the accounting system problems are further 
exacerbated at global companies such as Chicago- 
based Aon Corp., which has business divisions in 120 
countries. “IT is a function that runs across all parts 
of the organization, and it’s very difficult to extract 
the functional costs from the [profit and loss state- 
ments] of various reporting systems,” says David 
Barker, vice president of global IT finance for the 
provider of risk management, reinsurance and hu- 
man capital consulting services. 

The bottom line is that many CFOs of IT are hav- 
ing a hard time translating to senior management the 
effect that IT investments are having on, well, the 
bottom line. 
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Besides the difficulties inherent in measuring intan- 
gibles across multiple divisions with inadequate tools, 
there are other problems. CFOs of IT “don’t have good 
data or good information, and that makes it tough for 
them to figure out how much it costs them to run a 
data center and whether it makes sense to outsource 
it,” says Barbara Gomolski, an analyst at Gartner Inc. 
and a Computerworld columnist. 

Another factor that makes it tough for CFOs of IT 
to do their jobs effectively is the lack of financial 
know-how among IT staffers and midlevel IT man- 
agers. “It’s usually a relatively small number of peo- 
ple at the top of the IT [organizational] chart who are 
‘with it’ financially,” says Gomolski. 


Teaching Financialese 

Some IT controllers are attacking the problem by 
having their finance staffers educate IT workers on 
financialese. At Allstate, everyone who’s involved in 
IT decision-making has received training in the com- 
pany’s financial allocation process, says Scardina. 

At DHL, Zaichick and his staff have worked closely 
with the company’s program management office and 
technical staff over the past few years to ensure that 
front-line technology staffers understand the finan- 
cial requirements necessary to develop a business 
case for a project. 

Other companies have taken more formal ap- 
proaches to educating IT workers on finances. At 
Intel, all employees are able to take a “business 
acumen class,” which educates workers on the basic 
business parameters for the company (i.e., assessing 
Intel’s progress against the competition), says Busch. 
In addition, IT project managers are taught to help 
the IT finance team evaluate financial alternatives as 
part of their skills training, he says. 

To help both IT and finance executives get a better 
handle on these issues, the Society for Information 
Management formed an alliance with the Financial 
Executives Institute a few years ago, says Aon CIO 
June Drewry, who was SIM’s international president 
until 2000. The two groups meet and share strategies. 

Despite the problems inherent in their traditional 
jobs, CFOs of IT are undeterred. In fact, a growing 
number of them, like DHL’s Zaichick, are taking on 
expanded IT management roles, including participa- 
tion in IT benchmarking, contract negotiations and 
software licensing. Meta’s Rubin describes the new 
role this way: “You're not the teller in the bank 
counting the dollars; you’ve become a financial coun- 
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with participation from the IT finance side. 


A COUNTING LIFE 


Paul Costello officially retired as 
fh the CFO of IT at the University of 
~ Miami on May 31, 2003. But while 
he’s less involved in day-to-day 
budget activities as a twice-a-week 
special projects manager for the 
Coral Gables, Fla.-based university, 
Costello, who has 20-plus years of experience in 
his role, is still active in overseeing the university's 


IT finances. Computerworld’s Thomas Hoffman 
asked Costello, 68, to share his insights. 

How did you come into the CFO of IT role at 
the University of Miami? In 1977, | went to the uni- 
versity as a bursar in charge of student accounts re- 
ceivables based on my experience in data process- 
ing and my previous responsibility for a $25 million 
accounts receivable environment. After three or four 
years, [CIO] Lew Temares asked me if | wanted to 
get into DP again, and | did. The IT finance focus be- 
came an increasingly bigger part of my job, even 
though the title was “director of administration and 
budget.” We didn’t know what to call it. 


Do you run into political battles over IT 
finance issues? Certainly, there are political situa- 
tions and competing priorities because we service 
administration, faculty, students and a medical 
school. Each of those groups brings a different focus 
to what's appropriate and what's the first priority. 

How do you allocate resources? In terms of 
so forth, we have a couple of steering committees. 
They work primarily within the ongoing operational 
budget. We then get Lew involved to look at that 
as a group. Lew and the project sponsor try to sell 
the IT/business projects to different constituents, 


Any problems creating a standardized ap- 
proach to valuing IT investments? Yeah, it's 
evolved over time. [Laughs.] Some people want 
to know how quickly we get payback, others want 
to know internal rate of return, others ask how this 
will reduce costs, others ask how this will improve 
productivity. There's no single measure. But if you 
develop a history of not having cost and project- 
duration overruns, then you begin to get credibili- 
ty. What gets [more] credibility is if you can show 
the business need or how a particular area is go- 
ing to be dramatically impacted by an investment. 





Transparency — the New Engine 
of Growth and Greatness 


Critical reading for IT professionals and managers. Succeed by learning 
how the Internet and open IT architectures enable companies to 
become open enterprises — in turn competing and performing better. 


Reaction from business leaders 





“Don Tapscott and David Ticoll hit the bulls-eye with 
The Naked Corporation. The demand for openness and candor has never 
been greater. The Naked Corporation is a leadership toolkit for turning the 
relentless demand for transparency from threat to advantage.” 
— A.G. Lafley, Chairman, President and Chief Executive, Procter & Gamble 


“They’ve done it again. Tapscott and Ticoll’s capacity to combine a fresh 
and authentic perspective with real world data has once again opened the 
aperture on our emerging networked economy. A brilliant work.” 

— Dr. Eric Schmidt, Chairman and CEO, Google, Inc 


“A rare thing these days — a business book with a profound and 
important new idea. The Naked Corporation explains how a new force 
is changing the corporation and competitiveness. There are relevant, 


sometimes jarring insights in every chapter. And what a great read.” 
ee nae How the Age of Transparency 
“Tapscott and Ticoll are ahead of the wave. The era of transparency and Will Revolutionize Business 


all its implications are about to crash down on corporations everywhere. 


The Naked Corporation is the first survival guide.” DON TAPSCOTT and DAVID TICOLL 


— £ a a) + ill now! n 
Paul Taaffe, Chief Executive Officer, Hill & Knowltor Authors of DIGITAL CAPITAL 


“A well-researched and timely book. The authors show 


how trust — powered by broad corporate transparency — isn’t just "The Naked Corporation argues 
about ethics, it is about success.” : 7 

— John Chambers, President and CEO, Cisco Systems d beautifully and persuasively, that there 

is no contradiction between good business 

“We need a corporate philosophy for the 21st century. and the values of honesty and openness. 


Tapscott and Ticoll’s book The Naked Corporation provides this — . . . 
not only the rationale for a transparent corporation but also This book belongs in the briefcase of Cvery 


the principles of leadership in an open world.” right-thinking manager In the country. . 
— Klaus Schwab, Founder and President, World Economic Forum — Malcolm Gladwell, author of The Tipping Point 


Media Reaction 
“This is a fresh and compelling thesis, | (This) “big idea coherently and most | “Tapscott and Ticoll produce compelling 
backed up by some persuasive evidence.” | convincingly, combines an analysis of | evidence that transparency is an 

— BusinessWeek | the recent crisis of corporate America | inevitable social phenomenon and that 


| 


| with a celebration of the technological such transparency is good.” 
| revolution...a wake up call.” — Fast Company 
~— The Economist | 


; 
} 
{ 


Join the discussion on harnessing transparency’s power with Don Tapscott at www.AgeofTransparency.com 
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é it’s not 
about what 
happens; it’s 
about how you 
respond to what 
happens. 


J. GREG HANSON, assistant 
sergeant at arms and first ClO P i! Set vas 





of the U.S. Senate 
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WH is 


Think you’ve 
got tough cus- 
tomers? J. Greg 
Hanson serves 
100 U.S. sena- 
tors, dozens of 
committees 
and staffs in 50 
states. And about 
that upcoming 
inauguration... 


About a year and a 
ba half ago, the leader- 
] ship of the U.S. Sen- 
ate decided to raise 
the profile of IT at the Capitol. They 
wanted to provide direction, update 
technology, elevate awareness and 


improve customer service. To accom- 
plish that, they invited J. Greg Han- 


son to become assistant sergeant at 
arms and the Senate’s first CIO. 
“When you get a call like that, 

the only correct response is yes,” 
Hanson says. 


Since then, he has faced many of 
the same challenges encountered by 
CIOs everywhere, as well as some 
that are unique. Hanson told Kath- 
leen Melymuka about his job, where 


” 


KATHERINE LAMBERT 






“every day is a surprise.” 
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You’re the CIO; what does your other title 
mean? In the Senate, all technology is 
managed out of the sergeant at arms of- 
fice, so I’m an assistant sergeant at arms. 


Are you a political junkie? No, definitely 
not. I’m not a tech junkie either. I’m 
interested in delivering tools and solu- 
tions to help senators accomplish their 
missions. I look for ways to use tech- 
nology to solve business problems, not 
for technology’s sake. 


What kinds of positions did you hold previ- 
ously, and in what types of organizations? 
Prior to here, I was CTO at Universal 
Systems & Technology, a high-tech 
company in Northern Virginia. Prior to 
that, I was CTO at Telos Corp. We 
grew that company and spun off some 
new companies, and I did some CIO 
work in some of the subsidiaries. Prior 
to that, I had a 20-year career in the 
Air Force, and I was in technology 

the entire time. 


Some CIOs consider themselves technolo- 
gists first; others consider themselves pri- 
marily business people. Where do you fall 
along that spectrum? I’ve got very, very 
deep tech expertise; I’ve got a Ph.D. in 
computer science. But in my entire ca- 
reer — from the Air Force through my 
time in the commercial world — it’s 
been clear to me that technology is a 
tool. It’s a wonderful tool that can give 
you advantage if you use it correctly, 
but it’s a tool to make bigger, more im- 
portant things happen. I consider my- 
self a business person before a tech- 
nologist, even though I still teach a 
graduate course in technology at the 
University of Maryland. 


How big is the Senate IT group? I have 
about 500 people reporting to me. Two 
hundred fifty to 300 are full-time gov- 
ernment employees; the rest are con- 
tractors. But IT at the Senate is even 
bigger. To get it done right requires a 
team that also includes the Rules Com- 
mittee and the Appropriations Com- 
mittee of the Senate. And every sena- 
tor’s office has a small tech staff. They 
report to the senators, but they’re also 
part of the larger tech team here. 


What is the IT group responsible for? We’re 
responsible for the entire Senate IT in- 
frastructure, all the networks, all the 
telecommunications, information pro- 
cessing, storage, front- and back-office 
applications — all the typical things a 
CIO does. We're also very, very closely 
tied to continuity of operations, and 
we do a lot of planning and work with 
our counterparts in security. We’re re- 
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sponsible to see that the Senate has 
state-of-the-art technology and to look 
into further strategic technology and 
enterprise architecture and how that 
can best be used in this environment. 
So I’ve got CTO as well as CIO duties. 


| It’s a dream job. 


Is your position in any way political? It’s a 
federal government job, but it’s not po- 
litically aligned, and it’s completely 
nonpartisan. 


What are some of the unique aspects of your 
role - things you do that are outside the 


| purview of other Ci0s? I get to do great 


stuff. When we have elections or a 
transition or an inauguration, I have to 


| support them. We have to set up the 
offices, provide all the technology, get 


the systems set up, train the staff, sup- 
port telephone and radio. When Presi- 
dent Reagan’s funeral took place, we 
supported that. And as an assistant 
sergeant at arms, I participate in 
ceremonies and sometimes escort 
dignitaries. 


| What are some of your top priorities as CIO? 


Customer service; that’s No. 1. That’s 
tough in this environment because I 
have about 10,000 customers. Equal to 
that is security. They need to access in- 
formation anywhere at any time. 

Next is strategic planning: looking 
over the bow for new technology and 
innovation, staying ahead of the tech- 
nology curve. Technology changes 
very quickly, and senators and staff see 


| that and demand excellent technology. 


We have to keep it all lined up and 
facing in the right direction. 


Ten thousand customers? | thought you had 
100. I have 137 entities: a hundred sen- 
ators, all the committees and leader- 
ship organizations, the sergeant at 
arms organization, the secretary of the 
Senate. I support the senators’ state of- 
fices as well — their infrastructure, 
help desk, telecom requirements. 
When you add all the staffs, there are 
about 10,000 people. 


In many companies, the business executives 
form an IT steering committee that sets pri- 
orities for IT projects and spending. Is there 
anything similar in the Senate? We use a 
combination of the Senate leadership 
organization, plus the Rules and Ap- 
propriations committees, plus my or- 
ganization. Rules sets policy and pro- 
cedures. We build budgets, but Appro- 
priations has to bless that. The Senate 
leadership gives me oversight, and 
there are organizations of system ad- 
ministrators and administrative man- 





agers, and I get input from them ona 


|} constant basis, as well as from technol- 


ogy working groups. 


What are some of your big challenges? 
When I’m trying to do a big project, I 


| try to gain consensus, and that’s a chal- 


lenge. There’s also the challenge of 
being in the public eye and the chal- 


| lenge of special events. We have the 


regular day-to-day work, and then 
there’s a special event and there’s a 
surge, and we have to set up transition 
offices or work a state funeral in addi- 
tion to all the day-to-day stuff. 

There’s the challenge of strategic 
planning. I have 137 entities. Each has 
an idea of where we should head in 
technology strategy, and I have to take 
all that into account. 

There’s the challenge of getting con- 
sistent, workable requirements. I can’t 
wait around forever to get require- 
ments, or the technology will jump out 
from under me. So we go with innova- 
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| tion, rapid prototyping, small pilots. 

| We'll put something in there real quick 
| and try it on one office, and if they like 
it, maybe others will. We have to think 
| big, start small and scale fast. 


ClOs sometimes complain that their busi- 

ness executives are technically illiterate. 

| How tech-savvy is the average senator? 

| The senators I’ve worked with are very 
tech-savvy. They have cell phones, 

PDAs, BlackBerries. They operate 

| computers. They know how to do this 

| stuff. They also know what they need 

| to get their jobs done, and they know 

| the technology is there to do it. 


| 
| 
| 
| 
| 
| 
| 
| 
| 
| 
| 
| 


| What’s the toughest part of your job? 
Trying to merge requirements from so 
| many entities into something that you 
| can deliver that will scale and be cost- 
| effective and apply to everyone. Trying 
| to make everyone happy with 137 dif- 
ferent customers to satisfy. That forces 
| me to consider a lot of different op- 
| tions and choices. For example, not all 
| senators want e-mail the same way. 
There are choices and options out 
there, and they know about them. So 
they won't just take what I offer. I have 
to figure out a way to get it all to mesh 
to one set of requirements that’s cost- 
effective and I can support. 


| How will your performance be measured? 
In terms of customer satisfaction. I do 
a formal survey every year. It’s in proc- 
ess now. It’s not a little thing with an 
e-mail questionnaire. We sit down or 
get on the phone with each office and 
get responses. We hear it directly — 
warts and all. My performance will 

| also be measured by our ability to re- 

| spond to unforeseen events and by the 
ability of senators to communicate 
anywhere, anytime, under any circum- 
stances. It’s not about what happens; 
it’s about how you respond to what 
happens. 


What's been your most memorable day so 
far? I had been here maybe a month, 
and I was called into a senator’s office 
by the senator himself, and I got royally 
chewed out. We were in the process of 
migrating e-mail accounts and had mi- 
grated his to a new system. We had 
done a wonderful job on the migration 
but not on the customer care part. He 
gave it to me good. And I couldn’t help 
thinking: I’m standing in our nation’s 
Capitol being chewed out by a U.S. sen- 
ator. He’s spending his time being con- 
cerned about this. When I walked out of 
there, I was as happy as I could be, be- 
cause I thought, “This is something I 
can fix.” @ 49666 
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The 2004 Wall Street Journal/Harris Interactive 
Business School Survey of 2,849 MBA recruiters recently ranked 
the top U.S. business schools. The findings: 


University of Michigan (Stephen M. Ross School of Business) 
Carnegie Mellon University (David A. Tepper School of Business) 
Dartmouth College (Tuck School of Business) 

University of Pennsylvania (Wharton School) 

University of Chicago 

Yale University 

Northwestern University (Kellogg Graduate School of Management) 
Columbia University 

MIT (Sloan School of Management) 

Stanford University 


MIT (Sloan) 

Carnegie Mellon (Tepper) 

University of Maryland (Robert H. Smith School of Business) 
Brigham Young University (Marriott School of Management) 
Harvard University 

University of Michigan (Ross) 

University of Denver (Daniels College of Business) 
Stanford University 

University of Texas (McCombs School of Business) 
University of California, Berkeley (Haas School of Business) 


MANAGEMENT 


CSG mis i ee 


Vice presi- 
real e- Ul (8) 


oT es 
Teal ae) t be 
TOR Or ticle eel gos 


Q&A ET TT RRS 
month’s guest 
Cm OR PM Rae leTiTt) 
readers’ questions about making 
career changes and dealing with“ 
problem employees. If you have a 
question you'd like to pose to one of 
Om eu me OUR Mr Celle mel 
to 
FURR MURPH Mm art 
and online each month. 


I've been in the credit management field 
for 10 years, but I’m considering a midlife 
career change to be an IT instructor. Can 
you give me some advice on the market 
prospects? While the technical training and 
executive education industry has exploded in 
the past five years, I've been amazed at the limit- 
ed amount of experience that instructors tend to 
have. A value-added training opportunity can 
come in two forms: on-the-job training anda 
well-organized and -managed classroom expe- 
rience from an instructor who has real-world ex- 
perience. It sounds like you could contribute to 
the latter. 

The market generally doesn't pay well, 
whether you're training or providing instruction 
inamore formal academic environment. How- 
ever, the intrinsic benefits of changing people’s 
lives and growing their capabilities can’t be val- 
ued in dollars. There are plenty of jobs out there 
inthis arena, so go forit. A riskless approach to 
diving in may be to accept a part-time, evening 
instruction role that would allow you to feel out 
the industry and the classroom setting. 


Small Companies Gearing Up 


Which best describes the current status of your full-time IT staff? 


PT 4% 
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Are there sti!! good opportunities for 
mainframe design and development? I’ve 
spent the past 10 years working with 
midrange software and infrastructure. I'd 
like to return to the mainframe world, but | 
don’t want to take a big cut in pay. Is this 
possible? I’m not sure that | would recommend 
this move, especially if your paycheck is a priori- 
ty. Keep in mind that pay is directly correlated to 
your depth of experience in a specific niche (fi- 
nancial services or manufacturing, for example) 
and specific set of technologies. The mainframe 
worldis static - you rarely get boosts in pay for 
niche experience. This is mostly because large, 
transactional environments tend to be operating 
on older business models that don't evolve as 
rapidly and don't require sexy new technology 
enhancements to enable them. 


I have two employees who work for me in 
Mexico. | visit the plant at least once a 
week, but when I’m not there, my employ- 
ees take advantage of my absence to 
leave early, take long lunches and so on. | 
get complaints of lengthy wait times for 
problems. What are some suggestions? 
Quite simply, they need to be terminated. That 
usually presents a lorig list of human resource is- 
sues to overcome, but it’s worth your time now 
to create a well-documented action plan for 
both employees. If you don’t already have along 
list of key performance indicators, | would start 
with that and include it in the action plan. You 
should be able to measure the employees’ pro- 
ductivity against those indicators, and if the em- 
ployees are falling short of the goals, they can 
and should be terminated. 

I've had the opportunity to manage many re- 
mote employees, and | find that it takes a special 
kind of worker to make it successful. You need 
aself-starter who doesn't need hand-holding 
and who appreciates the opportunity for alittle 
autonomy. You may be able to trade up for two 
employees (or even one, depending on how un- 
productive they are) who have more experience 
and will accept the same pay just because they 
want the opportunity to work independently. It's 
atough challenge; goodluck! @ 49665 
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beyond the scope of traditional IT, ac- 
cording to arecent Meta Group Inc. 
study called “Driving the Business Val- 
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surveyed, only 58% said they believe 
their scope of responsibility is that of 
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indicated that their jobs include other 
business functions, from facilities to 


Companies with 1,000 
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Companies with 20,000 
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BASE: 867 technology decision-makers at North American companies; *1,002 technology decision-makers at small North American 
companies. Percentages may not total 100 because of rounding. SOURCE: Forrester Research Inc., September 2004 
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EVENTS 


Competitive 
Intelligence 


@ Oct. 28-29, Boston 

Sponsor: Institute for International 
Research 

Competitive Technical Intelligence 
2004 explores tools and tech- 
niques for using business intelli- 
gence. Topics include improving 
your odds, linking CTI to customer 
needs, leveraging new analysis 
and collection techniques, and 
anticipating opportunities. 
www.iirusa.com/cti/ 


Business Process 
Management 


@ Nov. 3-4, New York 
Sponsor: BrainStorm Group Inc. 


The sixth annual Business Process 
Management Conference includes 
both business and IT tracks with 
presentations, case studies and 
best practices. Topics include 
process modeling, analysis and 
design; process ownership and 
change management; and rules- 
driven BPM. 
www.brainstorm-group.com/ny/ 
O4bpmbrochure.pdf 


Executive Coaching 


@ Nov. 8-9, New York 
Sponsor: The Conference Board Inc. 


The 2004 Executive Coaching 
Seminar offers presentations on 
topics including changing the rules 
of the global game; the ethical chal 
lenge to U.S. business; and what's 
coachable, what's not. 
www.conference-board.org/ 
coaching.htm 


World Business 


Forum 


@ Nov. 17-18, Chicago 

Sponsor: The HSM Group Ltd. 

The conference includes political, 
academic and practical viewpoints 
from speakers including Jack Welch, 
Madeleine Albright and Larry Bos- 
sidy on leadership, organization, 
financial markets, innovation, exe- 
cution, resilience and growth. 





BART PERKINS 


Development 
Drop-Down Budgeting 


ANY COMPANIES are beginning to 

increase their budgets for new IT de- 

velopment. Unfortunately, they often 

underestimate ongoing production 

costs — the “drop-down” costs from 
development efforts. A realistic IT budget must plan for | 
a project’s support after it’s installed. Drop-down costs 
include a portion of the infrastructure support expens- 
es for the new system, such as servers, WANs/LANs 


and desktops. They also in- 
clude ongoing software li- 
cense fees and production 
support staff (production 
control, security, database 
administration, help desk). 
These costs automatically 
drop down into future oper- 
ating expenses, whether they 
are budgeted or not. 

Underestimating these 
drop-down costs is a ram- 
pant problem, partly because 
many IT managers are rusty, 
not having had the luxury of 
budgeting for new develop- 
ment for a while. I recently 
found that several Fortune 
500 clients had underesti- 
mated these costs by $40 mil- 
lion to $50 million per year. 

Be sure to examine your drop-down 
costs carefully, especially if your organi- 
zation has focused primarily on mainte- 
nance for the past few years. 

The following phrases (often heard in 
budget reviews) are drop-down myths 
and should raise a red flag: 

“We already own the server, so it’s free.” 
Your current infrastructure may have 
enough excess capacity for several addi- 
tional applications. But when you reach 
its limit, the next new application will 
require a major infrastructure upgrade. 
Good budgeting spreads the cost of addi- 
tional infrastructure equitably, without 
forcing the new application to bear the 
entire cost of the required infrastructure 
purchases. 





“We are repiacing an existing 
application, so the cost will be the 
same.” Most new systems of- 
fer more functionality, sup- 
port more users and store 
significantly more data than 
the applications they re- 
place, resulting in additional 
production costs. (More- 


over, many applications nev- | 


er totally disappear.) 

“We are becoming more effi- 
cient, so we can absorb it into 
the existing budget.” During 
the Internet boom, many 
companies acquired large 
amounts of technology but 


never implemented planned | . se 
P P | The business case or preliminary prod- 


systems. As a result, they 

had excess capacity. After 

the Internet bust, these 
same companies focused on efficiency 


| (a discipline lost during the boom) by 
| consolidating servers, rationalizing soft- 


ware and redesigning their networks. 
As a result of these efforts, they’ve had 
to absorb only limited drop-down lately. 
Excess capacity will eventually be ab- 
sorbed, however, and there won't be any 
fat left to trim. 

“We are funding major new development 


| efforts, but our budget will remain flat.” Some 
| IT organizations prefer to ignore drop- 
| down costs as long as possible because 


of corporate and political pressures. But 
bad news doesn’t get better with age, and 
the drop-down costs will eventually ap- 
pear as budget overruns. 

Drop-down costs should be included 


| in the business case for any new system, 
| but since the case may have been written 
| several years ago, the numbers could be 

| outdated. Before you transfer this data 


into your budget, make sure the esti- 


| mates are still realistic. In addition, since 


| most applications run for many years, 


costs can change significantly over time. 
Create a rough estimate for drop-down 
costs and refine it annually. 

To increase the accuracy of your drop- 


| down estimates, try the following: 


@ Compare them against industry 


| norms as a reality check. Gartner Fellow 





| Bruce J. Rogow reports from recent vis- 
| its with CIOs that drop-down costs run 


between 28% and 35% of the cost of de- 


| veloping the new system (regardless of 


whether it’s custom code or a purchased 
package). Costs are somewhat lower on 


| projects to replace existing systems, but 
| review your assumptions carefully. 


@ Leverage your accounting data. Use 
it to create accurate production cost esti- 
mates or to validate your outsourcer’s 


| numbers. 


@ Track your drop-down history. Eval- 


| uate recently installed applications to 


determine actual production costs. Over 


| time, you'll develop increasingly accu- 


| rate estimates for your environment. 


® Develop rigorous capacity planning. 


| uct design should provide realistic esti- 

| mates of the number of users, daily 

| transaction volumes, database sizes, etc. 
| This data enables detailed modeling to 

| accurately forecast ongoing production 

| costs. If you’re buying an established ap- 
| plication package, the vendor should be 
| able to help you with this modeling. 


| 
| 
| 
| 


Accurate estimates of drop-down 


| costs prevent nasty budget surprises 


later. If you ignore these unavoidable 
expenses, they will slowly consume the 
budget you have (finally!) acquired for 
new development. Protect your future 
development dollars by accurately bud- 
geting for drop-down. @ 49668 


WANT OUR OPINION? 


For more columns and links to our archives, go to 
www.computerworld.com/opinions 
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TOP BUSINESS SCHOOLS 


1 


2 
3 
4 
5 
6 
7 
8 
9 
10 


University of Michigan (Stephen M. Ross School of Business) 
Carnegie Mellon University (David A. Tepper School of Business) 
Dartmouth College (Tuck School of Business) 

University of Pennsylvania (Wharton School) 

University of Chicago 

Yale University 

Northwestern University (Kellogg Graduate School of Management) 
Columbia University 

MIT (Sloan School of Management) 

Stanford University 


TOP FOR TECHNOLOGY/TELECOMMUNICATIONS/INTERNET 


Seon omrawan= 


MIT (Sloan) 

Carnegie Mellon (Tepper) 

University of Maryland (Robert H. Smith School of Business) 
Brigham Young University (Marriott School of Management) 
Harvard University 

University of Michigan (Ross) 

University of Denver (Daniels College of Business) 

Stanford University 

University of Texas (McCombs School of Business) 
University of California, Berkeley (Haas School of Business) 
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question you'd like to pose to one of 
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to askaleader@computerworld.com 
and watch for this column in print 
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I’ve been in the credit management field 
for 10 years, but I’m considering a midlife 
career change to be an IT instructor. Can 
you give me some advice on the market 
prospects? While the technical training and 
executive education industry has exploded in 
the past five years, I've been amazed at the limit- 
ed amount of experience that instructors tend to 
have. A value-added training opportunity can 
come in two forms: on-the-job training anda 
well-organized and -managed classroom expe- 
rience from an instructor who has real-world ex- 
perience. It sounds like you could contribute to 
the latter 

The market generally doesn't pay well, 
whether you're training or providing instruction 
inamore formal academic environment. How- 
ever, the intrinsic benefits of changing people's 
lives and growing their capabilities can’t be val- 
ued in dollars. There are plenty of jobs out there 
inthis arena, so go for it. A riskless approach to 
diving in may be to accept a part-time, evening 
instruction role that would allow you to feel out 
the industry and the classroom setting 


Small Companies Gearing Up 


Which best describes the current status of your full-time IT staff? 


24% 


www.computerworld.com 


Are there still good opportunities for 
mainframe design and development? I’ve 
spent the past 10 years working with 
midrange software and infrastructure. I'd 
like to return to the mainframe world, but | 
don’t want to take a big cut in pay. Is this 
possible? I'm not sure that | would recommend 
this move, especially if your paycheck is a priori- 
ty Keep in mind that pay is directly correlated to 
your depth of experience ina specific niche (fi- 
nancial services or manufacturing, for example) 
and specific set of technologies. The mainframe 
world is static ~ you rarely get boosts in pay for 


;_ niche experience. This is mostly because large, 
| transactional environments tend to be operating 


on older business models that don't evolve as 
rapidly and don't require sexy new technology 


t enhancements to enable them 


‘ [have two employees who work for me in 


Mexico. | visit the plant at least once a 


| week, but when I’m not there, my employ- 
| ees take advantage of my absence to 

| leave early, take long lunches and so on. | 

: get complaints of lengthy wait times for 

| problems. What are some suggestions? 

' Quite simply, they need to be terminated. That 

' usually presents along list of human resource is- 
; Sues to overcome, but it's worth your time now 

| tocreate a well-documented action plan for 

' both employees. If you don't already have along 
‘list of key performance indicators, | would start 


with that and include it in the action plan. You 


' shouldbe able to measure the employees’ pro- 
ductivity against those indicators, and if the em- 
‘_ ployees are falling short of the goals, they can 

:_ and should be terminated 


I've had the opportunity to manage many re- 


‘mote employees, and I find that it takes a special 
: kind of worker to make it successful. You need 

| aself-starter who doesn’t need hand-holding 

| and who appreciates the opportunity for alittle 

' autonomy. You may be able to trade up for two 


employees (or even one, depending on how un- 
productive they are) who have more experience 
and will accept the same pay just because they 
want the opportunity to work independently. It's 
atough challenge; good luck! @9 49665 
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study called “Driving the Business Val- 
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a “traditional ClO.” More than 40% 
indicated that their jobs include other 
business functions, from facilities to 
DMUs sei Neel RU melt) 
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supporting business transformation. 


21% 
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Companies with 1,000 
to 4,999 employees 


Companies with six 
to 999 employees* 
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Companies with 5,000 
to 19,999 employees 


Companies with 20,000 
or more employees 
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Competitive 
Intelligence 


® Oct. 28-29, Boston 

Sponsor: Institute for International 
Research 

Competitive Technical Intelligence 
2004 explores tools and tech- 
niques for using business intelli- 
gence. Topics include improving 
your odds, linking CTI to customer 
needs, leveraging new analysis 
and collection techniques, and 
anticipating opportunities 
www.iirusa.com/cti/ 


Business Process 


Management 


@ Nov. 3-4, New York 

Sponsor: BrainStorm Group Inc. 
The sixth annual Business Process 
Management Conference includes 
both business and IT tracks with 
presentations, case studies and 
best practices. Topics include 
process modeling, analysis and 
design; process ownership and 
change management: and rules- 
driven BPM. 
www.brainstorm-group.com/ny/ 
O4bpmbrochure.pdf 


Executive Coaching 


@ Nov. 8-9, New York 
Sponsor: The Conference Board Inc. 


The 2004 Executive Coaching 
Seminar offers presentations on 
topics including changing the rules 
of the global game; the ethical chal- 
lenge to U.S. business; and what's 
coachable, what's not 
www.conference-board.org/ 
coaching.htm 


World Business 
Forum 


@ Nov. 17-18, Chicago 

Sponsor: The HSM Group Ltd. 

The conference includes political 
academic and practical viewpoints 
from speakers including Jack Welch, 
Madeleine Albright and Larry Bos- 
sidy on leadership, organization, 
financial markets, innovation, exe- 
cution, resilience and growth 
www.wbfchicago.com 
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Development 
Drop-Down Budgeting 


ANY COMPANIES are beginning to 

increase their budgets for new IT de- 

velopment. Unfortunately, they often 

underestimate ongoing production 

costs — the “drop-down” costs from 
development efforts. A realistic IT budget must plan for 
a project’s support after it’s installed. Drop-down costs 
include a portion of the infrastructure support expens- 
es for the new system, such as servers, WANs/LANs 


and desktops. They also in- 
clude ongoing software li- 
cense fees and production 
support staff (production 
control, security, database 
administration, help desk). 
These costs automatically 
drop down into future oper- 
ating expenses, whether they 
are budgeted or not 

Underestimating these 
drop-down costs is a ram 
pant problem, partly because 
many IT managers are rusty, 
not having had the luxury of 
budgeting for new develop- 
ment for a while. I recently 
found that several Fortune 
500 clients had underesti 
mated these costs by $40 mil- 
lion to $50 million per year. 
Be sure to examine your drop-down 
costs carefully, especially if your organi- 
zation has focused primarily on mainte- 
nance for the past few years. 

The following phrases (often heard in 
budget reviews) are drop-down myths 
and should raise a red flag: 

“We already own the server, so it’s free.” 
Your current infrastructure may have 
enough excess capacity for several addi- 
tional applications. But when you reach 
its limit, the next new application wiil 
require a major infrastructure upgrade. 


Good budgeting spreads the cost of addi- 


tional infrastructure equitably, without 
forcing the new application to bear the 


entire cost of the required infrastructure 


purchases. 


BART PERKINS is managing 
partner at Leverage Part- 
ners Inc. in Louisville, 
Ky., which helps ClOs 
manage their IT suppli- 
ers. He was previously 
CIO at Tricon Global 
Restaurants Inc. and 
Dole Food Co. Contact 
him at BartPerkins@ 
LeveragePartners.com. 


“We are replacing an existing 
application, so the cost will be the 
same.” Most new systems of 
fer more functionality, sup 
port more users and store 
significantly more data than 
the applications they re- 
place, resulting in additional 
production costs. (More- 
over, many applications nev 
er totally disappear.) 

“We are becoming more effi- 
cient, so we can absorb it into 
the existing budget.” During 
the Internet boom, many 
companies acquired large 
amounts of technology but 
never implemented planned 
systems. As a result, they 
had excess capacity. After 
the Internet bust, these 
same companies focused on efficiency 
(a discipline lost during the boom) by 
consolidating servers, rationalizing soft- 
ware and redesigning their networks. 
As a result of these efforts, they’ve had 
to absorb only limited drop-down lately. 
Excess capacity will eventually be ab- 
sorbed, however, and there won’t be any 
fat left to trim. 

“We are funding major new development 
efforts, but our budget will remain flat.” Some 
IT organizations prefer to ignore drop 
down costs as long as possible because 
of corporate and political pressures. But 
bad news doesn’t get better with age, and 
the drop-down costs will eventually ap- 
pear as budget overruns. 

Drop-down costs should be included 


in the business case for lew system, 


but since the case may ‘ been written 
several years ago, the bers could be 
outdated. Before you transfer this data 
into your budget, mak« he esti 
mates are still realistic. In addition, since 
most applications run for many 
costs can change significantly over time 
Create a rough estimate for drop 
costs and refine it ant 
To increase the < 
down estim: 
8 Compare 
norms as a reai 
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veloping the new system (reg 
whether it’s custom code or 
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The business case or pr 
uct design should provide realisti 
mates of the number of users, d 
transaction volumes, database sizes, etc 
This data enables detailed modeling to 
accurately forecast ongoing production 
costs. If you’re buying an established ap 


plication package, the vendor should be 
able to help you with this model 
rd 


Accurate estimates of drop-down 


costs prevent nasty budget surprises 
later. If you ignore these u | 
expenses, they will slowly consume the 
budget you have (finally 

new development. Protect you 
development dollars by accuratel 


geting for drop-down. @ 49668 
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GEAC ENTERPRISE 
SOLUTIONS, INC. 


Senior Technical 
Support Engineer Ii 


Geac® (TSX: GAC) is a global 
enterprise software company for 
Business Performance Manage- 
ment, providing customers 
worldwide with the core financial 
and operational solutions and 
service to improve their busi- 
ness performance in real time. 


Geac Enterprise Solutions Inc 
is seeking qualified candidates 
for the postion of Senior Tech- 
nical Support Engineer || to be 
responsible for upgrading and 
executing releases for foreign 
and domestic clients. Analyze 
and provide solutions for client 
system issues; perform custom- 
ization to meet client's needs. 
Work with escalations and prod- 
uct engineers to provide resolu- 
tion of complex non-reproduc- 
tive failures and customer re- 
ported issues. Interface with 
Professsional Services to pro- 
vide cross-functional solutions. 


Requires: Bachlor's degree, or 
its equivalent experience in 
Comp. Sci., M.1.S. or Electrical 
Eng., and experience in client 
server deviopment and consult- 
ing. Also requires expertise in 
network technology such as 
TCP/IP, ICMP, SSC and FTP: 
BEA, Tomcat and Apache appli- 
cation servers; and Java Tech- 
nologies such as J2EE, RMI, 
CORBA and Serviets. 


To apply for this position please 
send your resume to 
geac.jobs@geac.com or visit 
our website at www.geac.com 


Consulting Engineer wanted to 
manage & perform consulting 
projects, as well as write & sell 
consulting projects, specifically 
targeted towards the chemical, 
materials, bio-medical, foods. 
metals, plastics & semi-conduc- 
tor industries; write proposals & 
reports; negotiate contracts & 
agreements; set up & solve CFD 
problems in projects; report on 
technical, schedule & cost per- 
formance; make presentations 
to clients; participate in high 
tech marketing activities for the 
chemical & materials industries 
by preparing sales examples, 
writing & presenting technical 
papers, participating in the ap- 
propriate professional societies 
& institutional/industrial consor- 
tia & orgs. & building partner 
relationships; maximize efficien- 
cy of consulting project perf. by 
maximizing team eng. utilization 
as well as utilization of foreign 
office; organize review mtgs. to 
discuss tech. & commercial as- 
pects of & risk analysis of client 
leads; manage deadlines & cli- 
ent expectations; contribute to 
marketing activities; devise stra- 
tegies for working with key re- 
peat clients. Must have PhD in 
Chem. or Mech. Eng. w/ special- 
ization in CFD, & 2 yrs. CFD 
exper., incl. use of CFD technol- 
ogy to solve applications prob- 
lems for the chem. & material 
industries, & at least 1 yr. exper. 
using commercial CFD software 
products & managing the cost & 
scheduling of consulting pro- 
jects. (A Master's deg. in Chem 
or Mech. Eng. & 5 yrs. stated 
exper. can substitute for above 
reqts.) Salary $71,195/yr. Send 
2 resumes to Job Order #2004- 
897, P.O. Box 989, Concord, NH 
03302-0989 


Software Engineer (Multiple 
Positions). Design & impie- 
ment internet & intranet 
business app. By using 
NET, ASP.NET Platform, 
XML, ActiveX, DCOM, Ja- 
vaScript and Visual Basic 
Script. Req: Bachelor in 
Comp. Sci., Comp. Eng., or 
Electrical Eng. 40hrs/wk 
Job/interview Site: Tor- 
rance, CA. Send resume to 
BQE Software, inc. @ 2601 
Airport Dr., #380, Torrance, 
CA 90505. 


Senior Software Engineer (Den- 
ver, CO) - Using object oriented 
design principles; Java, VXML 
mark-up lang.; Web Logic tools; 
Oracle database tools; Unix & 
Microsoft Windows NT operating 
sys.; & Sun Microsystems ser- 
vers: Consult w/ business cus- 
tomers concerning software & 
website needs. Analyze/design/ 
develop/code/test databases; 
websites; interactive voice re- 
cognition software, e-business 
internet transactions software & 
other software applications to 
meet customer's needs. Req 
Bachelor's in Comp. Sci., related 
field or equiv. exp. Five yrs. exp 
in software dev., including 2 yrs 
exp. in website dev.; proficiency 
in Object oriented database de- 
sign/website design, detailed 
working knowledge of interactive 
voice recognition software dev., 
Siebel PRM software, Java, 
VXML, Web Logic tools, Oracle 
Database tools, Unix operating 
system, Sun Microsystems ser- 
vers, & Microsoft Windows NT; & 
Java certification. 8-5, M-F, 
$82K/yr. Apply by resume only 
to Workforce Development Pro- 
grams, P.O. Box 46547, Denver, 
CO 80202, refer to job order 
number CO5093365. 


Blackbaud, The leading end-to- 
end data management and tech- 
nology solutions provider for the 
nonprofit community, offering 
software, services and e-solu- 
tions, is seeking a Senior Solu- 
tions Engineer based in Charle- 
ston, South Carolina to position, 
quality, investigate and demon- 
strate Blackbaud’s Business In- 
teiligence Software Solutions 
through an understanding of the 
technical architecture and of 
Visual Basic for Applications 
(VBA), SQL Server, Analysis 
Services and relational databas- 
es including SQL. Requirements 
are a Master's degree in Comp- 
uter Information Systems, Eng- 
ineering or a closely related field 
plus two years of experience as 
a Software Sales Engineer, Soft- 
ware Product/Marketing Manag- 
er or Software Consultant. Ex- 
perience must include experi- 
ence implementing business in- 
telligence software. Must include 
experience with SQL Server, An- 
alysis Services, Visual Basic for 
Applications and relational data- 
bases including Structural Query 
Language (SQL). If interested 
please submit resume to: Black- 
baud Recruiting — AK, 2000 
Danie! Island Dr., Charleston, 
SC 29492 


Comp. Engr.: Parallel Sci 
Computing (Beowulf Clus- 
ter, C/C++/F77, MPI); paral- 
lelize seq./dvip. new parallel 
Numer. Methods code for 
Meso2D/Full Wave Models 
Simulations (NSF Gravity 
waves Rsrch); ext. to 3-D ; 
r/t_ visualization; Cluster 
Inst./maint. Requires: M.S. 
Comp. Sci. & 2 yrs. exp. in 
job or equiv. educ. Comp 
Salary. Send resume to: 
ERAU, Univ. Attorney, 600 
S. Clyde Morris Blvd., 
Daytona Bch., FL 32114 


Software Engineers to analyze, 
design, develop, test appls us- 
ing Java, JSP, Serviets, EJB, 
XML, HTML, JavaScript, C, 
C++, Oracle etc under UNIX, 
Windows OS; provide architec- 
tural support, create and inte- 
grate product data stores into 
Siebel product module; perform 
Siebel CRM implementations 
and install Siebel servers/| 
clients; Develop, enhance com- 
ponents of new/existing appls 
and databases; interact, train 
end users. Require: M.S. in CS 
or Engineering (any branch) with 
1 yr exp in Siebel. F/T. Travel 
involved. Competitive salary. 
Resume to: HR, ABZ Consult- 
ing, Inc., 2600 Century Parkway, 
Ste 100, Atlanta, GA 30345. 


Computerworld - InfoWorld - Network World - October 11, 2004 


S/W Engrs, Progmr Anlyts, Sys- 
tems Analysts, for MA based IT 
firm. Need Bach +1 yr exp for Jr. 
Level pos’s & Mast. +1 yr. Bach 
+ 5 yrs of exp for Sr. Lvl posit’s. 
Var. skills req: Statistical S/W 
(SAS), PERL,ERWIN, C, C++, 
VC++, iplanet, ASP, DHTML, 
JavaScript, Sybase, Oracle, 
SQLServer, Business Objects, 
Crystal Rpts., Windows server 
2003, IINUX, IIS, UNIX, Sun 
Solaris, CISCO, PL/SQL, Cog- 
nos, Brio, Netscape enterprises 
server, Coldfusion, data model- 
ling, e-business intelligence 
cics, db2, peoplesoft, jded- 
wards, power builder, CRM 
VB, .NET, SAP, j2ee, jsp, Jdbc, 
ejb, web sphere, web-logic 
Apply w/2 copies of resume to 
H.R.Dept, Corporate Computer 
Services Inc. 80 Tower, Office 
Park, Woburn, Ma - 01801 


Experts, Inc is looking for: 


Systems Analysts: Master's de- 
gree in computer Science/relat- 
ed field with One year experi- 
ence in the following: Oracle. 
Microstrategy, Cognos IWR, In- 
formatica, PowerCenter, Power 
Mart and Java Technologies. 


Programmer Analysts: Bachel- 
or's degree in computer science/ 
related field with 5 years pro- 
gressive exp. in any five of the 
following skills JAVA, J2EE 
XML, Struts, ANT, JBuilder. Peo- 
pleSoft, SAP R/3,ABAP, SAP 
Basis Admin, SAP BIW, ORA- 
CLE, PL/SQL, Actuate Reports. 


QA Tester: Bachelor's degree in 
computer science/related field 
with 5 years progressive exp. in 
the following: Automation Test 
tools, Win Runner, Load Runner, 
Test Director and Rational Tools 


We accept foreign education 
equivalent of the degree, or 
the degree equivalent in edu- 
cation and experience. 


Send Resume to Expertsinc 804 
N Meadow Brook Dr, Suite 
#120, Olathe KS 66062 


BCC USA, Inc - South Portland, 
ME needs experienced Prog- 
rammer Analyst having a Bach- 
elors degree with minimum two 
years of progressive work expe- 
rience in Oracle 9i/8i/8.x/7.x 
Oracle 9iAS, Forms 9i/6i/5.0/4.5, 
SQL*Loader, Reports 9i/6i/3.0/ 
2.5, PL/SQL, SQL, PL/SQL Web 
Toolkit, Discoverer 9i/4i, Actuate. 
MQ Series, Shell scripts, Perl, 
Java, JDBC, and JavaScript 
Should be expert in tuning SQL 
queries using Explain plan, 
SQL*Trace and TKPROF utility. 
Should also have some experi- 
ence in Oracle Database Ad- 
ministration.Competitive salary 
and benefits. M-F, 40 hours/ 
week. Please mail your resume 
to BCC USA inc., HR Depart- 
ment, 650 Main Street Suite 
201, South Portland, ME 
04106 


BCC USA Inc - South Portland, 
ME needs experienced Pro- 
grammer Analysts having a 
Bachelors Degree with minimum 
two years of progressive experi- 
ence in Analysis, Design, Dev: 
elopment, Testing and Imple- 
mentation of Java / J2EE based 
applications using JSP, Serviets, 
Applets, Java Swing, EJB, JD- 
BC, JNDi,JAXB, JMS, WSAD, 
WebLogic, Websphere, Struts 
(MVC) Framework, XML, XML- 
Spy, XSL, Oracle,DB2,MQ Ser- 
ies, UML(Rational Rose), RUP 
(Rational Unified Process), 
ClearCase, Ant, Erwin, Load 
Runner, JUnit, Unix (shell script- 
ing). Must have experience in 
implementing RUP methodolo- 
gy. Competitive salary and ben- 
efits. M-F, 40 hours/week. 
Please mail your resume to BCC 
USA Inc., HR Department, 650 
Main Street Suite 201, South 
Portland, ME - 04106 
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Software Engineer w/Mas- 
ters or foreign equivalent 
in Comp. Scie. or Engg or 
Math + 1 yr exp in using 
Share Point 2003, C#, 
VB.NET, ASP.NET, Front 
Page 2003, Win 2003, 
ASP, XML, HTML, DHTML, 
JavaScript, Visual Basic, 
COM/COM+, UML, Visual 
SourceSafe, Sybase & 
SQL Server. Mail Res to: 
Open Systems Technolo- 
gies, Inc. 8 Winter Street, 
6th Floor, Boston, MA 
02108 


Programmer Analysts to ana- 
lyze, design, test, implement 
and maintain software systems 
in client server envir using C, 
Java, HTML, VB, ORACLE, MS 
Access, etc under Windows, 
UNIX OSs; write documentation 
to describe program develop- 
ment and logic; perform onsite/ 
Offsite maintenance, debugging 
testing, and code optimization 
Require: BS or foreign equiv in 
CS/Engineering (any branch) 
with 2 yrs exp in IT. Competitive 
salary, F/T, travel involved 
Resume to HR, Ordusion 
Technologies, Inc., 3883 Rogers 
Bridge Road, Suite 504, Duluth, 
GA 


Sys. Analyst: Use OOA 
to design & dev. sys apps 
based on Use Cases & 
Req. using VC++ w/MFC 
to dev. med-irg bus. apps. 
Req: BS comp sci & 4 yrs 
OOD using MFC including 
full-cycle RAD develop. 
methods w/med-irg bus. 
apps & SQL. Resumes to: 
B. Silverman, VCG, Inc., 
1805 Old Alabama Rd., 
Ste 250, Roswell, GA 
30076. 


Software Engineers/ 
Systems Analysts for 
s/w co in Chicago, 
IL. Must have Bach's 
in Comp Sci/Comp 
Eng. or reltd field & 1- 
3 yrs exp. Send 
resume to: 


Sr. Systems Analysts to lead 
teams to analyze, design, devel- 
op, appls using Java, C++, 
VC++, VB, LabView, Matlab, 
MathCAD, Rational Rose, 
OOAD/P, UNIX etc; analyze, 
finalize architecture using RUP 
process, J2EE design patterns, 
UML diagrams; administer, de- 
ploy components into app! serv- 
er-Websphere; develop applica- 
tions as per ISO-9001, CMM 
level 3 compliant software dev. 
Methodologies. Require: Mas- 
ters or foreign equiv. in CS / 
Engg. (any branch) / Business 
with 1 yrs exp. Travel Involved. 
Comp.Salary. F/T. Resumes: 
HR, Synergy America * 
6340 Sugarloaf Parkway, Ste 
140, Duluth, GA 30097. 


Manager, DCP Software Devel- 
opment - Manage the design 
development and impiementa- 
tion of Dynamic Charging Plat- 
form Software Systems; man- 
age the installation of Sun Box- 
es and HP Unix Boxes to create 
a stand alone environment sup- 
porting the development of DCP’ 
compatible software; define and 
develop DCP systems require- 
ments for customized clients’ 
systems; manage, train and re- 
cruit software development pro- 
fessionals with regard to DCP 
development utilizing C++ with 
C/C++, including but not limited 
to the development of real-time 
performance critical applications 
in a multi-threaded environment; 
and train end-users on software 
maintenance. Must have five 
years of experience in time criti- 
cal software development in a 
multi-threaded environment uti- 
lizing C++ with C/C++. If inter- 
ested, submit resume in dupli- 
cate to: Natalie Gow, Intec 
Telecom Systems, 301 Peri- 
meter Center North, Ste 200. 
Atlanta, GA 30346. 


Programmers & Software 
Engineers: Analyze, design 
develop, test & implement 
specialized business apps 
in Business Objects Version 
5.1, Web Intelligence & 
related Business Objects 
products, RSA Bsafe SDK, 
VBA, ASP, Oracle related 
RDBMS & rel. tools. Travel 
req. / US Workers only. 
Send resume to Sapphire 
Consulting Company, 8 
Orange Street, Edison, NJ 
08817. EOE 


Sr. SW Eng’r: Dsgn device dri- 
ver for Intel Xscale/StrongArm 
processors w/ MS WinCE3.0 
WinCE.Net 4.2 & embed'd Lin- 
ux; Dsgn firmware for graph’s 
controllers & video capture/com- 
pres'n algorithms; Dsgn SW 
applic’n w/ MFC,C++, ODBC, db 
archit're/program’g. 40h/w, 8-5, 
MS Comp. Sci, 2-yr wk exp w/ 
Xscale, Video Controller & MFC. 
Resumes to SI Solutions, Tam- 


pa, Craig@s-i-solutions.com / 
fax: 813-630-2532. Only US 
wkrs can apply. 


Ohio insurance company seeks 
Application System Analyst to 
assist in researching and fact- 
finding to develop or modify 
more complex information sys- 
tems. Designs, codes, tests 
debugs, documents and main- 
tains program Min req 
Bachelor's or Master's (or eqv.) 
in Computer Science & 3 yrs in- 
|job/job-related exp. in program- 
ming including: MS .Net/C#, 
'VB6, COM, COM+, Windows 
DNA, C++, XML, UML, Visio, 
VSS, MFC, SQL. RDBMS, ASP, 
ASP.NET. Resume to Susan 
Swales, 300 N Commons Bivd., 
Mayfield Village, OH 44143 


Comp Consults is looking for 
programmer/system analysts, 
engineers or IT consultants to 
design & develop programs us- 
ing Oracle, Unix, C/C++, VB, 
Java, J2EE, EJB, XML, XSL/ 
XSLT. Mim requirement is BS 
plus experience. Please send 
resumes to immg@comp 
consults.com. EOE. No calls 


In-Venture Soft is seeking IT 
consultants to design & develop 
applications for various projects. 
Applicants must have BS/MS' 
with solid background in Oracle, 
WebSphere, Java, EJB, ASP. 
We offer competitive wage with 
full benefit. Travel maybe requir- 
ed. Apply at resume@ivsinc.net 
EOE. 


Nae beter eS 


Integrated Software Solutions, 
Inc., a rapidly growing IT con- 
sulting Co. has permanent pos: 
open for Cornputer Software 
Professionals w/BS or equiv & 
exp in one of foli skills or in com- 
bination 


+ Administration - Win NT/2000/ 
Unix 

* DBA - Oracle/Sybase 

* PeopleSoft & related People- 
Soft Tools 

* Main Frames - DB2, CICS. 
JCL, TSOP 

* Oracle Dvipr-SQL/PL/SQL/ 
Dvipr 2000 

*C, C++, VB, J2EE, ASP 

* SAP R/3 & related tools 

* QA Testing-WinRunner/Load- 
Runner/Silk/Rational Suite/ 
Test Director 


ISS, Inc., provides competitive 
salary & benefits. Applicants 
must be willing to relocate/travel 
to various unanticipated locs 
throughout US. Send resume to: 
HR Dept., ISS, Inc., Attn: HR, 55: 
Princeton- Hightstown Rd, Ste 
#103, Princeton Junction, NJ 
08550 or email to 
resumes@issinc-usa.com 


Programmer Analyst need- 
ed w/2 yrs exp in using 
Oracle Applications, Oracle 
Forms, Oracle Reports, 
Designer6, Discoverer3i, 
HP UNIX, Digital UNIX, Sun 
Solaris, Windows NT, Stan- 
dard APIs’, Data Pump, cus- 
tom.pil, SQL Loader, PL/ 
SQL & write Fast Formulas 
Generate test scripts using 
Mercury. Mail resumes to: 
Optima Technology Part- 
ners, Inc, 264 South River 
Rd, Ste #454, Bedford, NH 
03110 


Sr. Citrix Admin (CCEA or 
CCA) to dsgn, install, con- 
fig, support, & admin Cit- 
rix products (XPe, Nfuse, 
Citrix Sec Gateway, Res 
Mgr, Inst Mgr). Impimt & 
support large NT & Citrix 
Farm envrmts w/SNA con- 
nectivity. Resoive Citrix in- 
frastructure & app related 
issues & produce tech do- 
cumentation. BS+2 years 
exp. WTR, Inc, 156 5th 
Ave, Ste 1034, NY, NY 
10010. Res & cvr Itr. 


Application Integration Develop- 
ers Ill needed. Seeking candi- 
dates possessing BS or equiv 
and relevant work exp. Part of 
rel work exp. must include 2 
years working w/ JDE ERP and 
SQL. Duties include: Develop, 
maintain, enhance and inte- 
grate JDEdwards OneWorid en- 
terprise business applications 
Work w/ Peoplesoft Enterprise 
One (JDE ERP), webMethods 
Optio, SQL, Unix and Oracle 
Mail resume & refs to: Tempie- 
Inland Forest Products, 1300 
South Mopac, Austin, TX 
78746 


IT System Analyst. BS in comp. 
sci. or re. field; proven IT exp to 
incl. desktop mgmt, area sup- 
porting a large enterprise, Win- 
Install, Tivoli s/ware distribution 
PUSH, Tivoli UserLink, packag- 
ing applics via WISE & Tivoli 
packager, exp w/dsgn engg 
methodologies; demonstrated 
communication & proj. mgmt. 
skills, knowl of insurance & fin. 
syces & willing to travel & do 
on-call support. Resume & Cvr 
ltr to: Jennifer Schwartz, HR 
Refer to Job # ACW23174, 711 
High St, Des Moines, IA 
50392-0550. 


IT PROFESSIONALS 
Software Engineer 


(Glen Mills, Pennsylvania and other locations throughout the U.S.). Re 
sponsible for the design, implementation, configuration, and testing of soft- 
ware systems and system components in the Office of Information Man- 
agement. Creates design specifications for systems and components. Per. 
forms software development, including Lotus Notes Development and ASP 
and HTML Development, and software engineering including hands-on de- 
velopment of software components, web parts, and web services using 


NET framework, C# language, Domino R5, Lotus 
JavaScript, VBScript, VBA, DHTML, and ASP.NET. 


pt, ASP, DHTML 
s Visual Basic for 


software development as well as to maintain software applications. Devel- 
Ops web parts and components for use within Microsoft SharePoint v2 Port- 
al platform. Designs and documents data models. Performs SQL server de- 
sign and development, including hands-on development of SQL scripts, in- 
cluding ER diagrams and stored procedures. Develops XML schemas and 
XSUXSLT transformations. Creates scripts and utilities for data migration 
and synchronization between multiple platforms such as Lotus Notes/Dom- 
ino, Microsoft SharePoint, and Microsoft CMS. Designs components and 
systems within global web-based applications using object-oriented meth- 
odology. Participates in architecture and infrastructure definition of global 
web-based systems. Utilizes Rational Unified Process in software devel 
opment. Reviews business requirements, develops prototypes, evaluates 
third party solutions and creates design and architecture documents. 
Works in a team environment using a structured development process and 
delivers applications on time and within budget. Follows up with issues in 
an efficient manner, including working hand in hand with Quality Assura- 
nce, Operations, Project Management and/or Business Analysis. Regularly 


communicates project progress. 


issues, and risks to project manager. 
The wage offered is $80,400 per year. 


The work schedule is Monday 


Friday, 9:00 am to 5:00 pm. The position requires a Bachelor's degree or 
equivalent in Comp Science, Engineering (any), or Information Systems + 
2 years of experience in the job offered or 2 years of experience as a 
Software Engineer, Programmer Analyst, Software Developer, or Senior 
Software Developer. Employer regards a foreign degree as equivalent to a 
US Bachelor's degree as determined by an accredited education evalua 

tion service. Related experience must include two years of software deve! 

opment, software engineering, Lotus Notes Development (including Dom- 
ino R5 and Lotus Script), ASP/HTML Development (including VBScript) 
Visua! Basic, and SQL Server design and development (including Stored 


Procedures and ER Diagrams) 


Please send your resume or C.V. 


referencing Job Order Number 


'WEB460002 to the: PA CareerLink, 701 Crosby Street, Suite B, C 


PA 19013. EOE 


Chent/Server Programming 
Consultant. Design & develop 
innovative web-based solutions 
to strengthen relationships 
between financial institutions & 
their customers. Apply object- 
oriented design, analysis & 
development skills using JAVA 
J2EE platform. Analyze client's 
business & technical objectives 
to determine high level 
client/server application require- 
ments (e.g., addressing cross 
functional business processes 
or workflows, re-engineering 
business processes, creating 
object oriented business func- 
tional models). Design architec- 
tural components of the 
client/server environment (e.g 
data marshaling, insulation lay- 
ers, class libraries). Perform 
high level coding activities (e.g. 
codes device drivers using 
C/C++; codes architectural com- 
ponents, codes objects) 
Develop & coordinate the testing 
process for major application 
releases & enhancements 
Research & recommend prod- 
ucts & new technologies for the 
client/server environment & may 
act as a formal project leader for 
development projects. Req. a 
Bachelor's Degree or for. Equiv. 
in Eng., Comp. Sci 

related field, plus 5 yrs of pro- 
gressive exp. in the position 
offered, interface screen 
design/develop. or client/server 
programming develop. Qualified 
candidate must have at least 1 
yr of working exp. in architectur- 
al design for web-based 
client/server environment. Job 
located in Jacksonville, FL 
$94,000/yr. 40 hrs/wk, M-F, 9am 
- 5pm Send resumes to 
Workforce Program Support. 
Ref: FL-2562142, P.O. Box 
10869, Tallahassee, FL 32302- 
0869 


SW Eng’rs: Dsgn, dev'lp, test 
web-based bus. sw app’ns w/ 
ColdFusion 4.5/5/MX, ASP; 
Java wi Struts; Dsgn & prog’m 
CFML pages & custom tags 
w/ JavaScript, MVC, Fuse- 
box; Analyze & dsgn db mod- 
ule w/ Oracle8i, T-SQL, 
PL/SQL RDBMS, SQL Svr. 8- 
5; 40h/w. BS or foreign equiv- 
al't in Comp Sci, 3 yr wk exp 
in job or any posit'n w/ 
ColdFusion, Java/Struts, & T- 


Computerworld - InfoWorld - Network World - October 11, 2004 


IT Professionals needed for IT 
development & consulting firm 
headquartered in the Atlanta 
region but w/projects for clients 
located throughout the U.S. Mul- 
tiple positions open. The posi- 
tions open are for client server & 
web-based developers, GMA- 
LAN Engineers, Embedded soft- 
ware developers. Some of the 
skill sets needed immediately 
include 


+ Development of real-time sy- 
stems using 32-it microproces- 
sors. Required skill sets include 
GMLAN network operating sys- 
tem based development, ANSI 
C, basic H/W analysis & debug- 
ging, working w/stakeholders to 
define & refine requirements 
Exp. w/Vector, CANtech auto- 
motive network design & simula- 
tion tools (CANalyzer & CANoe) 
& GMLAN handiers 

* Perform ETL (Extract, Trans- 
form, & Load); design exception 
handling strategies & engage in 
performance tuning of databas- 
es; work w/Oracle DB2, SQL 
Server, MS Access, & Informat- 
ica 

+ Japanese speaking Test En- 
gineers & Embedded Software 
Engineers. Should be abie to 
tead, write & speak Japanese. 
Exp. w/ either Honda (GA-NET, 
iBUS) or equivalent protocols w/ 
Nissan or V850 (aka/other key- 
words: NEC V850, V850 Micro- 
controlier, V850 32-Bit, V850- 
SA1, V850 RISC processor) 

+ UnivLinux system adminis- 
trator, SAN developers 


All positions require a B.S 
degree in either computer sci- 
ence, math, engineering, or 
business. Competitive salary is 
offered. Exp. required varies 
from 1-5 yrs. exp. in skills identi- 
fied above. Send resume to: 


careers@datamatics us 
Applicants must have authority 
to work permanently in the U.S. 


Sr. Programmer An- 
alyst for health org in 
Sacramento, CA. Must 
have Bach's in comp 
sci/comp eng or ritd 
field & 2 yrs exp. Send 
resume to: Sutter 
Conect, 10470 Old 
Placerville Rd, Suite 
100, Sacrarnento, CA 

attn: Carla 
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Seeking qualified applicants for 
the following positions in Mem- 
phis/Collierville, TN: Senior Bu- 
siness Application Analyst. Act 
as liaison between technical 
developers and users/custom- 
ers. Requirements: Bachelor's 
degree or equivalent* in comput- 
er science, math, statistics, busi- 
ness or related field plus 5 years 
of experience in analyzing busi- 
ness systems and developing 
technical automated solutions 
Experience with SQL, CGI envi- 
ronment and J2EE environment 
also required. “Master's degree 
in appropriate field will offset 2 
years of general experience. 
Submit resumes to Marc 
Blackburn, FedEx Corporate 
Services, 4200 Regent Bivd 

Irving, TX 75063. EOE M/F/D/V. 


Java Developer. Provide appli- 
cation development services to 
create new web based applica- 
tions and maintain existing appli- 
cations to support business unit 
requirements using Java tech- 
nologies. Support the design 
and development of web based 
applications through require- 
ment development and docu- 
mentation, programming, testing 
and other tasks related to the 
systems development life cycle. 
BS in Information Systems or re- 
lated field. 3+ years exp with en- 
terprise-wide application devel- 
opment, Object Oriented pro- 
gramming and experience with 
database design and modeling 
Strong middieware and front end 
skills with a thorough under- 
standing of web architecture and 
design. Submit resume to Ned 
Bement, Director of Recruiting 
Alliance Consulting Associates 
Inc., 2005 Market Street, 32nd 
Fi, Philadelphia, PA 19103 


Systems Analysts to work as 
consultants at client sites in 
the U.S. and abroad. Imprint, 
customize & upgrade Oracle 
ERP s/ware pkgs. Regs 
BA/BS in Comp Sci, Eng'g, 
Bus, Logistics, HR, or related 
field + 2 yrs exp w/Oracle 
Apps or DB's. Send resumes, 
refs, and salary req's to Attn 
HR, IT Convergence, 150 E 
Gilman St, Suite B2200, 
Madison, WI 53703 or 
resume@itconvergence.com 


Web Software Engineers 
needed to dvip OSS s/ware 
for telecommunications mkt 
Reg Bach in Com Sci, Comp 
Eng, MIS or related tech'l 
field & 3 yrs exp in job or 3 
yrs exp in web-based s/ware 
dvipmt using MS tools, ASP 
& VB based COM/COM+, 
hitting SQL Server databas- 
es. Resume to RiverRock 
Systems, Attn: HR, 14901 
Quorum Dr., Ste 250, Dallas, 
TX 75254 


Technical Architect/Sr. Software 
Developer wanted. Must have 
Bach. deg. in Comp. Sci., Math 
Physics or related field & 3 yrs 
middleware, integration & web 
technology exper. includ. exper. 
with IBM WebSphere Application 
Server & IBM WebSphere MQ & 
1 yr. exper. providing tech. sup- 
port to customers in the energy 
&/or utilities industries. (Exper. 
can be concurrent). Send cover 
letter and resume to Corporate 
Recruiting Code EUAF, 
LogicaCMG, 32 Hartwell Ave 
Lexington, MA 02421. No third 
parties or phone calis please 
LogicaCMG is an EEO, M/F/V 
Employer 


DATABASE ADMINISTRTOR to 
develop, implement, and main- 
tain the company's database 
and information systems; des- 
ign, install, manage and main- 
tain the performance of SQL 
Server 2000 databases across 
the unified enterprise; develop 
and maintain custom inventory, 
invoice system and sales reports 
and modify standard reports 
using VB and PL/SQL; write 
queries for reports for account- 
ing and finance department; cre- 
ate various databases and main- 
tain database management soft- 
ware using server/client applica- 
tion, including SQL and object 
oriented programming §lang- 
uage. Require: Bachelor's in 
Computer Science/Information 
Systems. Competitive salary of- 
fered. Mail resume to: Presid- 
ent, King Kong USA, Inc., 800 
lowa Ave., Riverside, CA 92507 


Global IT Solutions USI, inc 
(GITSUSI, Inc.) has positions 
open for its branches in Port- 
land, ME and Dakota Dunes, 
SD. Prog. Analysts to analyze, 
design/develop s/w appis using 
Java, JavaScript, VBScript, ASP. 
HTML, Weblogic, Oracle, SQL, 
COBOL, DB2, CICS under 
Windows, Unix & MVS OS; per- 
form unit, functional, integration, 
regression and systems level 
testing; analyze user reqs, pre- 
pare design documents; develop 
& enhance online & batch pro. 
grams; implement, install, test, 
debug and modify new/existing 
appls. Require BS or foreign 
equiv. in CS/Engg. (any branch) 
& 2 yrs exp. in IT. Travel in- 
volved. Competitive Salary. F/T. 
Please specify desired location 
when sending resume. Resum- 
es to: HR, GITSUSI, Inc., 1133 
East 35th Street, Suite 2D, 
Brooklyn, NY 11210 


2Wire, Inc. in San 
Jose seeks Sr. SW 
Embedded Engr: BS 
CS in Eng'g or related 
field + 6 yrs relevant 
exp. (alt MS CS in 
Eng'g + 4yrs relevant 
exp). Send resumes 
to: 


tnguyen@2Wire.com 


www.2Wire.com 


Sr Programmer Analysts: man- 
age teams to analyze, design. 
maintain software appls using 
J2EE, Java, JSP, ASP, HTML, 
XML, Oracle, SQL Server on 
Windows/UNIX OS; perform 
requirements analysis and con- 
duct functional testing/debug- 
ging: document, maintain & 
update use cases, GUI design, 
BPR scenarios. Require: BS or 
foreign equiv. in CS/Engg.(any 
branch) and 2.5 years exp in IT 
OR MS in CS/Engg (any branch) 
and 6 months exp in IT. Travel 
involved. F/T position. Comp. 
Salary. Resume to: HR, Quest 
America, Inc., 211 East Ontario 
Street, Suite 1800, Chicago, IL 
60611 


Data Warehouse Specialists, 
inc. is looking IT professionals 
Duties inciude: design applica- 
tions for Business intelligence. 
On-Line Analytical Processing 
(OLAP) & Datawarehousing 
using various tools. Competi- 
tive wage with full benefits 
Please send resumes to 
info@dwspecialsts.com. EOE 


DocOptions, Inc. seeks high 
skilled Software Engineers to 
design & develop applications 
using Object Oriented Analysis/ 
Design tech, TCP/IP, XML, 
XSL. Applicants must have MS 
in computer science with 1-2 IT 
experience. Please send res- 
umes to 1851 Camellia Dr., 
Tracy, CA 95378 
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Product Manager required for 
leading digital pririting products 
firm to analyze clients’ product 
specifications and marketing re- 
quirements. Understand market 
trends, clients’ software func- 
tionality needs and forecasting 
models to oversee development 
of software prototypes using C+ 

ORACLE, SQL Server, Excei 
and other decision modeling 
tools. Assist in design, position 

message, and launch software 
and software services into the 
market to create valuable and} 
ongoing client relationships 

MBA in Business Administration 
or Marketing and relevant expe- 
rience in marketing and IT pro- 
ject management. Send resume 
to Elena Kotanova, Office 
Manager, Casion & Co., 5150 El 
Camino, Suite B14, Los Altos. 

CA 94022 


Sr. Programmer Analysts to lead 
teams to analyze, design, dev- 
elop appls using OOP, Java 
JSP, Serviets, EJB, XML, HTML 
JavaScript, Weblogic, JDBC 
Oracle, etc in UNIX, Solaris 
Windows OSs; develop Oracle 
stored procedures and data 
modeling; implement appls and 
perform strategic planning/oper- 
ations support; provide end 
user training. Require BS or for- 
eign equiv. in CS/Engg. (any 
branch) & 3 yrs exp. in IT. Comp 
salary, F/T, travel involved 
Resume to HR, Ordusion Tech- 
nologies, Inc., 3883 Rogers 
Bridge Road, Suite 504, Duluth 
GA 30097 
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Red Hat, Inc., located in Raleigh 
/Durham, North Carolina, has an 
immediate need for a Program- 
mer /Analyst to be responsible 
for providing programming/an- 
alysis/production support for Or- 
acle ERP applications. Specific 
duties include: providing func- 
tional and technica! support on 
the Oracle ERP module, includ- 
ing AR, GL, AP and iStore; de- 
signing and developing technica! 
reports to meet the needs of the 
ERP users; performing program- 
ming utilizing the following: Red 
Hat Enterprise Linux, Java, Perl 
and shell scripting; customizing/ 
extending Oracle applications 
utilizing Oracle Developer Tools. 
iStore and Workflow; and, partic- 
ipating, periodically, in a 24x7 
on-call, technical support rota- 
tion. Requires a Bachelor's de- 
gree in Computer Science, En- 
gineering or other ciosely reiat- 
ed field, together with the dem- 
onstrated ability to integrate and 
extend enterprise applications 
using Java and XML technology 
n an Oracle environment. Must 
also have demonstrated skills 
nvoiving SQL, J2EE, Apache. 
Tomcat. SOAP/WSDL, XML 
EAI tools, RDBMS and Oracle 
ERP or CRM. Annual salary is 
$65,000. Quaiified applicants 
respond to job code: BKT101 to 
martham@redhat.com 


Multiple openings for software 
engineers to design, develop 
and test computer programs for 
business applicatior 
software requirements 
mine feasibility of design; direct 
software system testing proce- 
ise in J2EE 
XML, Oracle and Apache Ser- 
ver. Requirements: Bachelor's 
Degree, educational or function- 
al (3 years experience=1 year of 
college) equivalent, in Engin- 
eering, Computer Science or re- 
lated field and two years experi- 
ence as a software engineer or 
computer programmer, knowl- 
edge of J2EE, XML, Oracle and 
Apache Server. Salary: $70,242/ 
year. Working Conditions: 8:00 
A.M. to 5:00 P.M., 40 hours: 
week, involves extensive travel 
and frequent relocation. Apply 
Site Administrator, Greene 
County CareerLink, 4 West High 
Street, Waynesburg, PA 15370 
Job No. WEB461155. 


Software engineer to design, de- 
velop and test computer pro- 
grams for business applications 
analyze software requirements to 
determine feasibility of design 
direct software system testing 
procedures using expertise in 
J2EE, EJB, Struts, JSF, Oracle 
Tivoli and JBuilder. Require- 
ments: Bachelor's Degree, edu- 
Cational or functional (3 years ex- 
perience=1 year of college) equi- 
valent, in Engineering, Computer 
Science or related field and two 
years experience as a software 
engineer or computer program- 
mer, knowledge of J2EE, EJB 
Struts, JSF, Oracle, Tivoli and 
JBuilder. Salary: $70,242/year. 
Working Conditions: 8:00 A.M. to 
5:00 P.M., 40 hours/week, in- 
volves extensive travel and fre- 
quent relocation. Apply: BECS, 
CareerLink Program Supervisor, 
Indiana County CareerLink, 300 
indian Springs Road, Indiana, PA 
15701, Job No. WEB460299. 


IT CAREER OPPORTUNITIES 


DELAWARE - Network Engin- 
eering Services Analyst. Deliver 
telecommunications services re- 
lated to internet/firewall and per- 
imeter security for South Ameri- 
can clients. Position requires a 
BS and relevant experience: a 
combination of experience and 
college level education may be 
accepted. The flexibility to travel 
and be on call may be neces- 
sary. Must be fluent in Spanish 
and/or Portuguese. Proof of 
legal authorization to work in the 
U.S. is required. Please forward 
your resume to Computer Sci- 
ences Corp., Attn: J. Le, 2100 E. 
Grand Ave., Mail Code A209, El 
Segundo, CA 90245 


Computerworld - October 11, 2004 


Software Engineer - Web Tech- 
nology: Architect scalable mid- 
dieware components using Ora- 
cle, Enterprise Java Bean (EJB) 
and enterprise-scale distributed 
computing systems; analyze 
and design database layer mid- 
dleware architecture to support 
access to central customer pro- 
file data from Oracle databases. 
design function implementations 
through BEA weblogic server in 
distributed cluster environments, 
apply techniques in the field of 
distributed artificial intelligence 
for business intelligence; ¢ 
cache and pagination fun 
to process large amount of en- 
terprise data; enhance managed 
information base systems for 
various database schemas to 
support management functions 
for e-business data; develop 
techniques to support require- 
ments for special data types for 
distributed systems; tune sys- 
tem performance to reduce sys: 
tem down time and improve sys 
tems stability. Requires a Mas- 
ters degree in Mechanical En- 
gineering or Computer ce 
and either 2 yrs. exp. in the job 
offered or 2 yrs. exp. in arch 
tecting scalat middieware 
components us O01 le, EJB 
and enterprise-scale distributed 
computing systems. Salary is 
r, 40 hrs/wk, 8AM to 


SYSTEMS ANALYST 

lyze, design, develop F 
ment, instali and maintain ¢ 
plex application software 

on client-server/e-comme 
web technologies and distri 

ed computer environment 
Visual J++, MFC, Visual Basic 
Crystal Report, ActiveX, HTML 
DHTML, COM, XML, CSS, VB 
Script, JavaScript, SQL Server. 
Developer 2000, Designer 

and Oracle under Wind 
95/98/NT/2000 and MS-DOS 
operating systems. Require 
B.S. degree (or equivalent) in 
Computer Science, or a closely 
related scientific discipline with 2 
yrs of exp in the job offered or as 
a Programmer/Analyst; Each 3 
yrs of progressively responsible 
work exp in the field will be con- 
sidered equivalent to 1 yr of col- 
lege education. Extensive travel 
‘on assignments to various client 
sites within the U.S. is required 
Competitive salary offered. Ap- 
ply by resume to: Rambabu 
Kumaraswamy, Newgen Tech. 
nologies, Inc., 2980 Ennfieid 
Lane, Duluth, GA 30096; Attn 
Job JB 


Software Developer, Boca 
Raton, FL, 40-hr wk, 9 AM 
- 5 PM, $85,027/yr.; 2 yrs 
exp in job offered & 
Bachelor's in Comp. Sci 
Comp Eng., Elect. Eng. or 
electronics; in lieu of 
degree, will accept 4 yrs 
exp in software dev or soft- 
ware programming, _in- 
cluding FoxPro DOS & 
data modeling. Supv. 3 
emplyees; develop, imple- 
ment & maintain applica- 
tion software to establish 
standards & specifica- 
tions; dev. application soft- 
ware using FoxPro/Visual 
FoxPro & other approved 
programming language; 
implement approved chan- 
ges to application soft- 
ware; Submit resume: 
Agency for Workforce 
Innovation, P.O. Box 
10869, Tallahassee, FL 
32302; JO#FL-2558750. 


Programmer Analyst 
(Micro/Web) - 
Multipie Openings 


Structured systems analysis 
design, development, testing 
quality assurance, implementa- 
tion, integration, maintenance 
and support of integrated client- 
server based systems for busi. 
ness, financial, banking, manu. 
facturing and fr commercial 
business application systems in 
a multi-hardware/multi- 
centralized or 
d relational database 
management stem: 4GLs 
(Fourth Ge: tion Languages 
and other Graphical User 
Interface) front-end tools. Analy- 
sis, design and development of 
client-server applicatic 
object-oriented meth 
Bachelor's Degree 
lent) in Computer S 
Engineer 
Commerce and 1 yr. experi 
or as Softy 
ms Analyst 


t have < 


Programmer Analyst 
(IBM Mainframe) - 
Multiple Openings 


Struct systems analysis 
sign, developme 

ty assurance, imple 
ntegration, maint 

port and conversion 

ume online transa 

ing and batch applicatic 

tems in a multi-hardware/mu 
software environ 

tralized database systems using 
relationai/hierarchcal/network 
database management syst- 
ems, Third Generation Languag- 
es (3GLs rth Generation 
Languages (4GLs), CASE tools 
and Transaction 

Software. Bachelor's 
equivalent) in 


experience in jc 
Software Engineer/Systems An 
alyst are req a ust Nave 
appropriate 

as follows 

1 of C; or 1c 

of A and 2 of 

IMS DB and 

nciudes CICS 


Qi 


Uniontown, PA 
Refer to Job Order # 
WEB 460344 


PROGRAMMER/ANALYST to 
analyze, design, develop and 
implement compiex mainframe- 
based application software 
using COBOi, CICS, DB2 
VSAM, IDMS, Datacom and 
JCL under ISO 9001 and SEI 
CMM quality procedures. Re- 
quire: B.S. degree in Computer 
Science, an Engineering disci- 
pline, a closely related field with 
2 yrs. of exp in the job offered. 
Extensive travel on assign- 
ments to various client sites 
within the U.S. is required 
Competitive salary offered 
Apply by resume to: Sophie 
Mookerji, Software Paradigms 
International, inc., 3901 Ros- 
well Rd, Ste 134, Marietta, GA 
30062; Attn: Job PK 
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Continued from page 1 


Hot Servers 


both those combinations make 
things hotter — that’s all there 
is to it,” said Thomas Roberts, 
director of data center opera- 
tions at Trinity Health in Novi, 
Mich., which operates hospi- 
tals and outpatient facilities. 

Roberts said he would like to 
install a row of blade servers at 
a disaster recovery site, but his 
14-inch raised floors, which are 
stuffed with cabling, can’t pro- 
duce enough air pressure to 
cool the servers. “Not everyone 
can build a data center to meet 
their cooling needs,” he said. 

Orange, Calif.-based AFCOM 
is an association of data cen- 
ter professionals. 

The importance of cooling 
was evident to conference at- 
tendees, said Steve Helms, an 
IT specialist involved in data 
center design at biotech firm 
Amgen Inc. in Thousand 
Oaks, Calif. He noted that two 
of the biggest displays were 
for power and cooling equip- 
ment suppliers Liebert Corp. 
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é The amount 
of power de- 
livered and required 
[by servers] far ex- 
ceeds our current 
techniques for cool- 
ing data centers. — 


BRUCE EDWARDS, PRESIDENT, 
CCG FACILITIES INTEGRATION INC 


in Columbus, Ohio, and Amer- 
ican Power Conversion Corp. 
in West Kingston, R.I. 

The presence of those ven- 
dors and others focused on fa- 
cility issues is “telling me that 
there is a very serious issue 
out there, and a lot of people 
are already experiencing it, 
and the rest of us are going to 
get it soon,” Helms said. 
“Blade servers are probably 
going to be in everybody’s 
data center sooner or later.” 

Cooling “is the issue,” said 
Bruce Edwards, president of 
CCG Facilities Integration 
Inc., a data center consultancy 
in Baltimore. Improper cool- 
ing can shorten a server’s life 
or cause failure, he said. 


“We are now presented with | 


equipment that can use more 
power then ever before in a 
smaller footprint,” he said. 
“And the amount of power de- 
livered and required far ex- 
ceeds our current techniques 
for cooling data centers.” 

Blade server racks come in a 
variety of sizes with different 
levels of power consumption. 
Large rack systems with 98 
blades spread over seven chas- 
sis can consume as much as 24 
kilowatts of power. That ex- 
ceeds the capacity of the latest 
cooling systems, which can 
handle 20 kilowatts, manufac- 
turers say. 

Patrick Luma, data center 
manager at Stanford Universi- 
ty, said he would like to see 
server vendors “concentrating 
less on condensing the size of 
the machines, such as having 
gone to 1U, and concentrating 
more on reducing the heat 


| sign trade-offs for its 1U and 


| besides traditional fans, heat 


| uct marketing manager for 


| line. For example, IBM built in 


| up less real estate. However, 


| putational capabilities at less 


| of these increasingly powerful 





within the machine.” A 1U de- 
vice is 1.75-in. high. 

Vendors said they’re work- 
ing to make systems more ef- 
ficient but face a catch-22, 


with some users complaining 
| about heat and others calling 


for more speed, said Darrel 
Ward, manager of server tech- 
nology and product planning | 
at Dell Inc. Dell has made de- 


blade servers, taking a moder- | 
ate approach in ordertocon- | 
trol heat, he said. 

Adding cooling technolo- 
gies to the server itself will 
come at a cost, Ward added. 
“If you introduce something 


sinks and airflows to a com- 
modity server, that $2,000 
server is not going to be 
$2,000 anymore,” he said. 


Server Economics 

Server vendors buy industry- 
standard components but try 
to distinguish themselves 
through efficient design, said 
Scott Tease, worldwide prod- 


IBM’s eServer BladeCenter 


cooling technologies that di- 
rect airflow and reduced the 
number of heat-generating fan 
motors, Tease said. 

The economics are com- 
plex. Very dense systems may 
require more cooling but take 


data center consolidations are 
increasing the sizes of IT facil- 
ities. Fast processors use more 
power to deliver greater com- 


wattage per MIPS, but this 
Moore’s Law advantage is off- 
set by users who install more 


commodity servers in their 
data centers. @ 49953 
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map includes adoption of the CIM standard: | 
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IBM On-Demand Data 
Centers in the Works 


ATLANTA 


IBM announced last week that 
it will expand the number of its 
on-demand data centers from 
one to 11 by the end of the year 
as part of a push to offer users 
virtual IT resources that can, in 
effect, be pooled and made 
available where needed. 

The technology underpin- 
ning these data centers can be 
provided as an outsourced ser- 
vice or incorporated into a 
company’s existing IT infra- 
structure. For instance, even if 
a user doesn’t want to adopt 
pay-as-you-go pricing with a 
service provider, it may want to 
use the model to measure in- 
ternal business unit consump- 
tion of IT resources. 

The cornerstone of this of- 
fering is IBM's Universal Man- 
agement Infrastructure, a set of 
software, architecture and best 
practices that allows multiple 
business units to draw on virtu- 
alized resources. 

“We have clients today that 
say they want utility infrastruc- 
ture in place ‘that allows me to 
scale up and down more easily, 
that allows me to take the as- 
sets that | have in my data cen- 
ter and make them more effi- 
cient,’ ” said Mike Riegel, direc- 
tor of IBM Global Services 


Not Sold 

But some users appear more 
willing to accept the idea of 
deploying an architecture for 
resource pooling than moving 
to an outsourcing model with 
utility pricing. 

Michael Crumpler, manager 
of server support at Atlanta- 
based media conglomerate Cox 
Enterprises Inc., is a heavy user 
of Sun Microsystems Inc. serv- 
ers and said he has heard simi- 
lar pitches from that company. 
The major concern Crumpler 
has with outsourced models, 


regardless of whether the 
equipment is at an outsourced 
location or in his data center, is 
the issue of control. With on- 
demand computing, “I’m not 
controlling my assets any- 
more,” he said. 

Crumpler said he isn’t willing 
to give up control of IT opera- 
tions except for servers running 
noncritical services, such as 
conference room scheduling. 

Dan Rhoden, a data center 
manager at Liberty Mutual 
Group Inc. in Indianapolis, said 
he has similar feelings. “It’s like 
your personal life. .. . The stuff 
that you use, you want to own,” 
he said. 

Crumpler and Rhoden were 
among the data center man- 
agers at the AFCOM confer- 
ence here last week. 

But Ayman Nassar, data cen- 
ter manager at Prince George’s 
Community College, a 30,000- 
student school in Largo, Md.. 
said he’s interested in the utility 
model. The college already leas- 
es its hardware, which he said is 
a first step toward utility pricing. 

“We are moving toward that 
model of paying for what you 
only really need, as you need 
it,” he said. 

IBM operates some 300 
data centers around the world, 
and some of the new on- 
demand centers, which are 
planned in the U.S., Germany, 
Italy, Sweden, the U.K., Aus- 
tralia, Japan and Singapore, 
will be coupled with the com- 
pany’s existing centers. IBM 
plans to open four or five more 
on-demand centers in early 
2008, Riegel said. 

- Patrick Thibodeau 


For additional data center coverage, 
visit our Web site: 
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Under the Volcano 


’M SITTING HERE under the volcano, waiting. (OK, I’m not 
actually under Mount St. Helens. I’m some 40 miles away. But 
that’s plenty close, thanks.) Some days, I can watch the vol- 
cano spit clouds of steam and ash thousands of feet into the 
sky, as experts say a major eruption could be hours away. Oth- 
er days, the same experts say it might be months or even years be- 
fore anyone in my neighborhood has something to worry about. But 
there are still reports that small earthquakes constantly shake the 
volcano and that the lava dome is rising. I know that sooner or later, 


something’s going to happen. 


If you’re a PeopleSoft customer, you probably feel that way too. 


After all, since the start of October, the De- 
partment of Justice has given up on its efforts to 
block Oracle from buying PeopleSoft, and 
PeopleSoft’s board has fired Craig Conway, the 
antitakeover CEO who had just spent a week 
reassuring customers at the company’s annual 
user conference. PeopleSoft’s board is still re- 
jecting Oracle’s takeover bids but now says it’s 
willing to do a deal if the price is right. 

And PeopleSoft users? You know something’s 
going to happen. You can’t stop it, you can’t 
choose the timing, and you don’t know exactly 
what sort of chaos will come raining down on 
your heads. You just know the situation could 
blow up on you at any time. And the experts — 
the pundits, analysts and columnists — say the 
deal could come within weeks and it’s probably 
too late for you to do anything to prepare for it. 

Of course, we’ve heard that before. 

Specifically, we heard it during the summer 
of 2003 — just after Oracle announced its play 
for PeopleSoft. Back then, pretty much all the 
experts agreed that PeopleSoft couldn’t stave 
off Oracle’s hostile bid for long. And that when 
Oracle CEO Larry Ellison an- 
nounced that he wouldn’t be selling 
PeopleSoft products after the 
takeover, it was already too late for 
PeopleSoft’s current customers to 
avoid becoming orphans. 

PeopleSoft users were out of time 
and out of luck, the experts said. 

And the experts were ... well, a 
little bit off. 

If you had listened to the experts 
— if you had believed it was too late 
to do anything — you’d have lost the 
past 16 months. You wouldn’t have 


spent that time developing contin- 





FRANK HAYES, Computer- 
world’s senior news colum- 
nist, has covered IT for more 
than 20 years. Contact him at 
hayes@computerworld.com. 


gency plans. And renegotiating contracts. And 
smoothing out your PeopleSoft implementa- 
tion, in case you needed to migrate. 

You can get a lot done in 16 months. You did 
get a lot done in that 16 months, didn’t you? 

If you did, you already know what to think of 
the most recent pronouncements from the in- 
dustry’s deep thinkers. Yes, maybe PeopleSoft’s 
board will accept a sweeter Oracle offer. Maybe 
it is now inevitable. After all, Oracle has been 
sliding. Right now, Oracle needs a PeopleSoft 
deal — and needs to keep PeopleSoft’s cus- 
tomers happy, too. 

Maybe a month or two from now, that deal 
will be done. 

On the other hand, maybe Oracle won’t 
sweeten the deal enough. Maybe the PeopleSoft 
board will change its mind. Maybe the lawsuits 
over the deal will have to grind through to their 
verdicts and appeals. Maybe Oracle will drop 
its bid. That deal might not close for years. It 
may never close. 

So when the pundits, analysts and columnists 
tell you it may be too late for PeopleSoft cus- 

? tomers to do anything in the face of 
a once-again-impending Oracle 
takeover, consider their record. 

Then, if you haven’t already, start 
working out those contingency 
scenarios. Start squaring up your 
installation, just in case. Start mak- 
ing plans and considering choices. 
If you really are out of time and 
luck, you'll waste a little effort. But 
if it turns out you’ve got another 
year or two, you’ll have made good 
use of it. 

And this is one volcano you can’t 
‘afford to just wait for. @ 49913 
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Where There’s Smoke . . . 


“| think my monitor is on fire!” user tells help desk pilot 
fish. Call the fire department, fish says immediately. 
“But can’t you just come look at it?” user asks. “| don’t 
see flames, but it went black and | smell smoke.” 
Hang up and call the fire department! fish tells her. So 
she does. “They came and took her burned popcorn 
out of the microwave,” sighs fish. “And her screen 
came back when she moved her mouse.” 


than seeing 15 
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Oracle Application Server 


“Oracle Portal is a 
powerhouse’ 


Network Computing, 5/13/04 
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Customization (35%) 
Development framework (20%) 





User personalization (15%) 


Integration (30%) 
Collaboration/productivity (10%) 
Prebuilt integration (10%) 
Identity management (5%) 


Search/document management (5%) 


Architecture (20%) 
Framework (5%) 
impiementation (5%) 
Manageability (5%) 
Standards (5%) 


Security Features (10%) 


Price (5%) 


TOTAL SCORE (100%) 


Total scores and weighted scores are 
based on a scale of 0-5. 


Oracle Application Server Portal 10g 
Winner of the 2004 Network Computing Editor’s Choice Award 


oracle.com/portal 
or call 1.800.633.0759 


Source: Network Computing, 5/13/04, Well-Connected Awards, p. 92 
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